🐞 Keycloak/Admin Portal: Can't publish on tenants with passkeys

[BelSequent]

Issue: https://github.com/sequentech/meta/issues/12279

[Copilot]

Pull request overview

Updates local development configuration and Keycloak realm provisioning so tenants using passkeys can successfully complete login/redirect flows during publishing.

Changes:

• Extend Keycloak client redirect_uris for voting portal clients to include VOTING_PORTAL_URL/*.
• Normalize local dev URLs in portal global-settings.json and .devcontainer/.env.development from localhost to 127.0.0.1 for voting/ballot-verifier.
• Update devcontainer auto-config script to invoke step-cli (instead of cli).

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
packages/voting-portal/public/global-settings.json	Switch ballot verifier base URL to 127.0.0.1 for local dev.
packages/sequent-core/src/services/keycloak/realm.rs	Add voting portal URL pattern to Keycloak redirect URIs for voting portal clients.
packages/admin-portal/public/global-settings.json	Switch voting portal base URL to 127.0.0.1 for local dev.
.devcontainer/scripts/config-cli.sh	Use step-cli for devcontainer auto-configuration.
.devcontainer/.env.development	Update local dev URLs for ballot verifier and voting portal.

Comments suppressed due to low confidence (1)

.devcontainer/scripts/config-cli.sh:19

• The script checks $? after the if block, so when required env vars are missing the last command is the echo, resulting in a false “configured successfully” message. Capture the exit code from step-cli explicitly and treat the missing-env branch as a failure (or exit early).

    step-cli step config \
        --tenant-id "$SUPER_ADMIN_TENANT_ID" \
        --endpoint-url "$HASURA_ENDPOINT" \
        --keycloak-url "$KEYCLOAK_URL" \
        --keycloak-user "$KEYCLOAK_ADMIN" \

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.