1[
2    %% Enable rabbit_auth_backend_oauth2
3    {rabbit, [
4        {auth_backends, [rabbit_auth_backend_oauth2, rabbit_auth_backend_internal]}
5    ]},
6
7    {rabbitmq_management, [
8      {enable_uaa, true},
9      {uaa_client_id, "rabbit_user_client"},
10      {uaa_location, "http://localhost:8080/uaa"}
11    ]},
12
13    %% Set a resource server ID. Will require all scopes to be prefixed with `rabbitmq.`
14    {rabbitmq_auth_backend_oauth2, [
15        {resource_server_id, <<"rabbitmq">>},
16        % Set up a legacy signing key
17        {key_config, [
18            {default_key, <<"legacy-token-key">>},
19            {signing_keys, #{
20                <<"legacy-token-key">> =>
21                    {map, #{
22                        <<"alg">> => <<"HS256">>,
23                        <<"value">> => <<"rabbit_signing_key">>,
24                        <<"kty">> => <<"MAC">>,
25                        <<"use">> => <<"sig">>}
26                    }
27                }
28            } %% signing keys
29        ]} % key_config
30    ]} % rabbitmq_auth_backend_oauth2
31].
32