From 13bd2b39375aa7ba566258c3204a3b1649e207ba Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Mon, 12 Sep 2016 23:34:49 +0000
Subject: [PATCH] prelim openid settings

---
 roles/mediawiki/templates/LocalSettings.php.fp.j2 | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/roles/mediawiki/templates/LocalSettings.php.fp.j2 b/roles/mediawiki/templates/LocalSettings.php.fp.j2
index 705c4025a4..20defde3d8 100644
--- a/roles/mediawiki/templates/LocalSettings.php.fp.j2
+++ b/roles/mediawiki/templates/LocalSettings.php.fp.j2
@@ -324,7 +324,18 @@ require_once "$IP/extensions/Auth_FAS.php";
 $wgAuth = new Auth_FAS();
 {% else %}
 require_once "$IP/extensions/OpenID/OpenID.php";
-# add openid config here.
+$wgOpenIDLoginOnly = true;
+$wgOpenIDMode = 'consumer';
+$wgOpenIDTrustRoot = 'https://fedoraproject.org/wiki/';
+$wgOpenIDConsumerDenyByDefault = true;
+$wgOpenIDServerForceAllowTrust = 'https://id.fedoraproject.org/openid/';
+$wgOpenIDProposeUsernameFromSREG = true;
+$wgOpenIDAllowNewAccountname = false;
+$wgOpenIDAllowExistingAccountSelection = false;
+$wgOpenIDTrustEmailAddress = true;
+$wgOpenIDAllowAutomaticUsername = true;
+// $wgOpenIDConsumerStorePath;
+$wgOpenIDForcedProvider = 'https://id.fedoraproject.org/openid/';
 {% endif %}
 require_once "$IP/extensions/fedmsg-emit.php";
 require_once "$IP/extensions/HTTP302Found/HTTP302Found.php";