mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 02:19:55 +08:00
30d8364f0aAdds support for mTLS for OIDC auth in the discourse-openid-connect plugin. If the SiteSettings `openid_connect_mtls_client_cert` and `openid_connect_mtls_client_key` are set, then tell OmniAuth to use auth_scheme `tls_client_auth` and pass the cert and key to the connection ssl options. OmniAuth will skip sending the client_secret in favor of the cert. Optionally, SiteSetting `openid_connect_mtls_client_key_passcode` can be provided to decrypt the private key. Related to dev topic t/185887
87 lines
1.9 KiB
YAML
Vendored
87 lines
1.9 KiB
YAML
Vendored
discourse_openid_connect:
|
|
openid_connect_enabled:
|
|
default: false
|
|
area: "oidc"
|
|
openid_connect_discovery_document:
|
|
default: ""
|
|
area: "oidc"
|
|
openid_connect_client_id:
|
|
default: ""
|
|
area: "oidc"
|
|
openid_connect_client_secret:
|
|
default: ""
|
|
secret: true
|
|
area: "oidc"
|
|
openid_connect_rp_initiated_logout:
|
|
default: false
|
|
area: "oidc"
|
|
openid_connect_rp_initiated_logout_redirect:
|
|
default: ""
|
|
area: "oidc"
|
|
openid_connect_rp_initiated_logout_include_client_id:
|
|
default: false
|
|
area: "oidc"
|
|
openid_connect_allow_association_change:
|
|
default: false
|
|
area: "oidc"
|
|
openid_connect_overrides_email:
|
|
default: false
|
|
area: "oidc"
|
|
openid_connect_authorize_scope:
|
|
default: "openid"
|
|
area: "oidc"
|
|
openid_connect_verbose_logging:
|
|
default: false
|
|
area: "oidc"
|
|
openid_connect_token_scope:
|
|
default: ""
|
|
area: "oidc"
|
|
openid_connect_error_redirects:
|
|
default: ""
|
|
type: list
|
|
list_type: secret
|
|
area: "oidc"
|
|
openid_connect_authorize_parameters:
|
|
default: ""
|
|
type: list
|
|
list_type: compact
|
|
area: "oidc"
|
|
openid_connect_claims:
|
|
default: ""
|
|
textarea: true
|
|
area: "oidc"
|
|
openid_connect_match_by_email:
|
|
default: true
|
|
area: "oidc"
|
|
openid_connect_groups_claim:
|
|
default: ""
|
|
area: "oidc"
|
|
openid_connect_user_field_mappings:
|
|
type: objects
|
|
default: []
|
|
area: "oidc"
|
|
schema:
|
|
name: mapping
|
|
properties:
|
|
claim:
|
|
type: string
|
|
required: true
|
|
user_field_id:
|
|
type: integer
|
|
required: true
|
|
openid_connect_use_pkce:
|
|
default: false
|
|
area: "oidc"
|
|
openid_connect_mtls_client_cert:
|
|
default: ""
|
|
textarea: true
|
|
area: "oidc"
|
|
openid_connect_mtls_client_key:
|
|
default: ""
|
|
textarea: true
|
|
secret: true
|
|
area: "oidc"
|
|
openid_connect_mtls_client_key_passcode:
|
|
default: ""
|
|
secret: true
|
|
area: "oidc"
|
