add /oauth2/callback and /mtba to Keycloak private client

ccp/docker-compose.yml

@@ -81,7 +81,7 @@ services:
       --provider-display-name="VerbIS Login"
       --client-id="${KEYCLOAK_PRIVATE_CLIENT_ID}"
       --client-secret="${OIDC_CLIENT_SECRET}"
-      --redirect-url="https://${HOST}/oauth2/callback"
+      --redirect-url="https://${HOST}${OAUTH2_CALLBACK}"
       --oidc-issuer-url="${KEYCLOAK_ISSUER_URL}"
       --scope="openid email profile"
       --code-challenge-method="S256"

ccp/modules/mtba-setup.sh

@@ -8,5 +8,6 @@ function mtbaSetup() {
       exit 1;
     fi
     OVERRIDE+=" -f ./$PROJECT/modules/mtba-compose.yml"
+    add_private_oidc_redirect_url "/mtba/*"
   fi
 }

ccp/vars

@@ -22,6 +22,9 @@ KEYCLOAK_REALM="${KEYCLOAK_REALM:-test-realm-01}"
 KEYCLOAK_URL="https://login.verbis.dkfz.de"
 KEYCLOAK_ISSUER_URL="${KEYCLOAK_URL}/realms/${KEYCLOAK_REALM}"
 KEYCLOAK_GROUP_CLAIM="groups"
+OAUTH2_CALLBACK=/oauth2/callback
+
+add_private_oidc_redirect_url "${OAUTH2_CALLBACK}"
 POSTGRES_TAG=15.6-alpine
 
 for module in $PROJECT/modules/*.sh