Cadoles
/
ansible-role-sso
10
0
Fork 0
Code Issues 1 Pull Requests 1 Projects Releases Wiki Activity

Compare commits

base: Cadoles:d259417d47a39fbf9e34fd181291e1434a1b7d1c
Branches Tags
Cadoles:master
Cadoles:wip/hotfix_mse2
Cadoles:hydra-webauthn
Cadoles:default-value
Cadoles:f/update_remote_user
Cadoles:modularization
..
compare: Cadoles:9261bff8963d5136b0dc72363dfc9bfcd6aafc04
Branches Tags
Cadoles:wip/hotfix_mse2
Cadoles:master
Cadoles:hydra-webauthn
Cadoles:default-value
Cadoles:f/update_remote_user
Cadoles:modularization

No commits in common. "d259417d47a39fbf9e34fd181291e1434a1b7d1c" and "9261bff8963d5136b0dc72363dfc9bfcd6aafc04" have entirely different histories.
d259417d47 ... 9261bff896

3 changed files with 0 additions and 7 deletions
Show Stats Expand all files Collapse all files

3
defaults/main.yml
View File

@ -162,9 +162,6 @@ hydra_saml_debug: no
# Niveau de verbosité du service shibboleth-sp # Niveau de verbosité du service shibboleth-sp
hydra_saml_sp_log_level: WARN hydra_saml_sp_log_level: WARN
# Durée de vie des "refresh_token"
hydra_ttl_refresh_token: "24h"
# Inclure les règles de cartographie des attributs SAML fournis par défaut par le projet hydra-shibboleth-sp-v3 # Inclure les règles de cartographie des attributs SAML fournis par défaut par le projet hydra-shibboleth-sp-v3
hydra_saml_include_sp_default_attributes_mapping: "yes" hydra_saml_include_sp_default_attributes_mapping: "yes"

3
sso.schema.yml
View File

@ -86,9 +86,6 @@ properties:
hydra_log_leak_sensitive_values: hydra_log_leak_sensitive_values:
type: boolean type: boolean
hydra_ttl_refresh_token:
type: string
# This value should not be changed after first deployment ! # This value should not be changed after first deployment !
hydra_secrets_seed: hydra_secrets_seed:
type: string type: string

1
templates/cadoles-pod-hydra-v1.conf.j2
View File

@ -18,7 +18,6 @@ PODMAN_ARGS="\
-e 'HYDRA_URL_POST_LOGOUT={{ hydra_url_post_logout }}' \ -e 'HYDRA_URL_POST_LOGOUT={{ hydra_url_post_logout }}' \
-e 'HYDRA_ALLOW_INSECURE=yes' \ -e 'HYDRA_ALLOW_INSECURE=yes' \
-e 'HYDRA_LEVEL={{ hydra_log_level }}' \ -e 'HYDRA_LEVEL={{ hydra_log_level }}' \
-e 'TTL_REFRESH_TOKEN={{ hydra_ttl_refresh_token }}'\
{% if hydra_public_cors_allowed_origins | default([]) | length > 0 %} {% if hydra_public_cors_allowed_origins | default([]) | length > 0 %}
-e 'SERVE_PUBLIC_CORS_ENABLED=true' \ -e 'SERVE_PUBLIC_CORS_ENABLED=true' \
-e 'SERVE_PUBLIC_CORS_ALLOWED_ORIGINS={{ hydra_public_cors_allowed_origins | join(',') }}' \ -e 'SERVE_PUBLIC_CORS_ALLOWED_ORIGINS={{ hydra_public_cors_allowed_origins | join(',') }}' \