Cadoles
/
ansible-role-sso
10
0
Fork 0
Code Issues 1 Pull Requests 1 Projects Releases Wiki Activity

WIP

This commit is contained in:
cmsassot 2022-09-29 16:50:33 +02:00
parent 3b7b187a60
commit cfcd37a2fa
2 changed files with 17 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
defaults/main.yml
View File

@ -110,12 +110,13 @@ hydra_passwordless_attributes_rewrite_rules:
# Hydra SAML configuration # Hydra SAML configuration
enable_hydra_saml: yes enable_hydra_saml: yes
hydra_saml_app_title: SAML hydra_saml_app_title: {}
hydra_saml_app_description: Authentification via SAML hydra_saml_app_description: {}
hydra_saml_app_icon_url: hydra_saml_app_icon_url:
hydra_saml_identity_provider_id: saml hydra_saml_identity_provider_id: saml
hydra_saml_idp_entity_id: https://samltest.id/saml/idp hydra_saml_idp_entity_id: https://samltest.id/saml/idp
hydra_saml_idp_metadata_url: https://samltest.id/saml/idp hydra_saml_idp_metadata_url: https://samltest.id/saml/idp
hydra_saml_app_options: {}
# Liste des URLs autorisées pour la redirection post-login/logout sur le service shibboleth-sp # Liste des URLs autorisées pour la redirection post-login/logout sur le service shibboleth-sp
hydra_saml_allowed_redirects: [] hydra_saml_allowed_redirects: []
@ -187,8 +188,8 @@ oidc_test_app_public_base_url: "{{ haproxy_public_base_url }}{{ haproxy_oidc_tes
enable_hydra_oidc: no enable_hydra_oidc: no
hydra_oidc_debug: no hydra_oidc_debug: no
hydra_oidc_cookie_path: "{{ haproxy_hydra_oidc_base_path }}" hydra_oidc_cookie_path: "{{ haproxy_hydra_oidc_base_path }}"
hydra_oidc_app_title: OpenID Connect hydra_oidc_app_title: {}
hydra_oidc_app_description: Authentification via OpenID Connect hydra_oidc_app_description: {}
hydra_oidc_app_icon_url: https://openid.net/wordpress-content/uploads/2014/09/openid-r-logo-900x360.png hydra_oidc_app_icon_url: https://openid.net/wordpress-content/uploads/2014/09/openid-r-logo-900x360.png
hydra_oidc_identity_provider_id: oidc hydra_oidc_identity_provider_id: oidc
hydra_oidc_authorize_endpoint: hydra_oidc_authorize_endpoint:
@ -200,7 +201,7 @@ hydra_oidc_scope: openid email
hydra_oidc_client_id: hydra_oidc_client_id:
hydra_oidc_client_secret: hydra_oidc_client_secret:
hydra_oidc_additionnal_env: {} hydra_oidc_additionnal_env: {}
hydra_oidc_options: {}
hydra_oidc_attributes_rewrite_rules: hydra_oidc_attributes_rewrite_rules:
email: email:
- "property_exists(consent.session.id_token, 'email') ? consent.session.id_token.email : null" - "property_exists(consent.session.id_token, 'email') ? consent.session.id_token.email : null"

15
templates/hydra-dispatcher-apps.yml.j2
View File

@ -16,9 +16,11 @@ hydra:
{% if enable_hydra_saml %} {% if enable_hydra_saml %}
- id: {{ hydra_saml_identity_provider_id | default("saml") }} - id: {{ hydra_saml_identity_provider_id | default("saml") }}
title: title:
fr: "{{ hydra_saml_app_title }}" fr: "{{ hydra_saml_app_title_fr }}"
en: "{{ hydra_saml_app_title_en | default("{{ hydra_saml_app_title_fr }}") }}"
description: description:
fr: "{{ hydra_saml_app_description }}" fr: "{{ hydra_saml_app_description_fr }}"
en: "{{ hydra_saml_app_description_en | default("{{ hydra_saml_app_description_en }}") }}"
login_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}/login" login_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}/login"
consent_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}/consent" consent_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}/consent"
logout_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}/logout" logout_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}/logout"
@ -28,14 +30,19 @@ hydra:
{% if enable_hydra_oidc %} {% if enable_hydra_oidc %}
- id: {{ hydra_oidc_identity_provider_id | default("oidc") }} - id: {{ hydra_oidc_identity_provider_id | default("oidc") }}
title: title:
fr: "{{ hydra_oidc_app_title }}" fr: "{{ hydra_oidc_app_title_fr }}"
en: "{{ hydra_oidc_app_title_en | default("{{ hydra_oidc_app_title_fr }}") }}"
description: description:
fr: "{{ hydra_oidc_app_description }}" fr: "{{ hydra_oidc_app_description_fr }}"
en: "{{ hydra_oidc_app_description_en | default("{{ hydra_oidc_app_description_fr }}") }}"
login_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_oidc_base_path }}/login" login_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_oidc_base_path }}/login"
consent_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_oidc_base_path }}/consent" consent_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_oidc_base_path }}/consent"
logout_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_oidc_base_path }}/logout" logout_url: "{{ haproxy_public_base_url }}{{ haproxy_hydra_oidc_base_path }}/logout"
attributes_rewrite_rules: {{ hydra_oidc_attributes_rewrite_rules | to_json }} attributes_rewrite_rules: {{ hydra_oidc_attributes_rewrite_rules | to_json }}
icon_url: "{{ hydra_oidc_app_icon_url }}" icon_url: "{{ hydra_oidc_app_icon_url }}"
options:
fr: "{{ hydra_oidc_app_options_icon_url_fr }}"
en: "{{ hydra_oidc_app_options_icon_url_en | default("{{ hydra_oidc_app_icon_url }}") }}"
{% endif %} {% endif %}
{% if enable_hydra_ldap %} {% if enable_hydra_ldap %}
- id: ldap - id: ldap