From c5f7c6bb24ed3a16874b64f3bf4bd69c269c70be Mon Sep 17 00:00:00 2001
From: Michael Barz <michael.barz@zeitgestalten.eu>
Date: Thu, 7 Aug 2025 13:07:03 +0200
Subject: [PATCH] Disable Client Registration

---
 config/keycloak/opencloud-realm.dist.json | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/config/keycloak/opencloud-realm.dist.json b/config/keycloak/opencloud-realm.dist.json
index fa2f841..fd63720 100644
--- a/config/keycloak/opencloud-realm.dist.json
+++ b/config/keycloak/opencloud-realm.dist.json
@@ -1952,6 +1952,21 @@
           ]
         }
       },
+      {
+        "id": "c016f2b3-cf74-410e-a852-f6c7b49e0f5a",
+        "name": "Block Client Registration",
+        "providerId": "trusted-hosts",
+        "subType": "anonymous",
+        "subComponents": {},
+        "config": {
+          "host-sending-registration-request-must-match": [
+            "true"
+          ],
+          "client-uris-must-match": [
+            "true"
+          ]
+        }
+      },
       {
         "id": "5a9aef85-98a6-4e90-b30f-8aa715e1f5e6",
         "name": "Allowed Protocol Mapper Types",