mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-06-14 22:36:09 +08:00
672074fc4a
For details, see the changelog for flask-oidc: https://github.com/fedora-infra/flask-oidc/blob/develop/docs/changelog.md The entry for 2.0.0 says: > The callback route (aka "redirect URL") is not configurable with > `OIDC_CALLBACK_ROUTE` anymore. It is always `/authorize`, The option `OIDC_CALLBACK_ROUTE` is available again in version 2.0.3, but we can override the whole redirect URL with `OIDC_OVERWRITE_REDIRECT_URI` (since 2.1.0).
22 lines
1.0 KiB
Python
22 lines
1.0 KiB
Python
{% if env == 'staging' %}
|
|
DATABASE_URI = 'postgresql+psycopg2://waiverdb@db01.stg.iad2.fedoraproject.org:5432/waiverdb'
|
|
RESULTSDB_API_URL = 'https://resultsdb.stg.fedoraproject.org/api/v2.0'
|
|
CORS_URL = 'https://bodhi.stg.fedoraproject.org'
|
|
OVERWRITE_REDIRECT_URI = 'https://waiverdb.stg.fedoraproject.org/oidc_callback'
|
|
OIDC_REQUIRED_SCOPE = 'https://waiverdb.stg.fedoraproject.org/oidc/create-waiver'
|
|
{% else %}
|
|
DATABASE_URI = 'postgresql+psycopg2://waiverdb@db01.iad2.fedoraproject.org:5432/waiverdb'
|
|
RESULTSDB_API_URL = 'https://resultsdb.fedoraproject.org/api/v2.0'
|
|
CORS_URL = 'https://bodhi.fedoraproject.org'
|
|
OVERWRITE_REDIRECT_URI = 'https://waiverdb.fedoraproject.org/oidc_callback'
|
|
OIDC_REQUIRED_SCOPE = 'https://waiverdb.fedoraproject.org/oidc/create-waiver'
|
|
{% endif %}
|
|
MESSAGE_BUS_PUBLISH = True
|
|
AUTH_METHOD = 'OIDC'
|
|
OIDC_CLIENT_SECRETS = '/etc/secret/client_secrets.json'
|
|
OIDC_USERNAME_FIELD = 'sub'
|
|
OIDC_OVERWRITE_REDIRECT_URI = '{{ waiverdb_oidc_overwrite_redirect_uri }}'
|
|
PREFERRED_URL_SCHEME='https'
|
|
SUPERUSERS = ['bodhi@service']
|
|
PORT = 8080
|