Files
fedora-infra_ansible/roles/pagure/templates/client_secrets.json
Aurélien Bompard 1e26cf9246 Some more fixes to get Pagure to work with OIDC on staging
- patch the httplib2 library to avoid hardcoding TLSv1
- set the missing configuration variables in `pagure.cfg` (they have no
  defaults)
- set the password for the future production version of
  `client_secrets.json`

Also note that in the private ansible repo, the Pagure client
configuration in Ipsilon was fixed: the `token_endpoint_auth_method`
variable was set to `"client_secret_post"`.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-08-11 11:39:03 +02:00

25 lines
950 B
JSON

{
"web": {
"client_id": "pagure",
{% if env == 'pagure-staging' %}
"auth_uri": "https://id.stg.fedoraproject.org/openidc/Authorization",
"client_secret": "{{ pagure_stg_oidc_client_secret }}",
"issuer": "https://id.stg.fedoraproject.org/openidc/",
"redirect_uris": [
"https://stg.pagure.io/login"
],
"token_uri": "https://id.stg.fedoraproject.org/openidc/Token",
"userinfo_uri": "https://id.stg.fedoraproject.org/openidc/UserInfo"
{% else %}
"auth_uri": "https://id.fedoraproject.org/openidc/Authorization",
"client_secret": "{{ pagure_oidc_client_secret }}",
"issuer": "https://id.fedoraproject.org/openidc/",
"redirect_uris": [
"https://pagure.io/login"
],
"token_uri": "https://id.fedoraproject.org/openidc/Token",
"userinfo_uri": "https://id.fedoraproject.org/openidc/UserInfo"
{% endif %}
}
}