diff --git a/roles/ipsilon/tasks/main.yml b/roles/ipsilon/tasks/main.yml index 303fe2fece..0e6c87aa4d 100644 --- a/roles/ipsilon/tasks/main.yml +++ b/roles/ipsilon/tasks/main.yml @@ -145,6 +145,22 @@ - oidc-config notify: - Restart apache + when: "env != 'staging'" + +- name: Template ipsilon OIDC client config + ansible.builtin.template: + src: "openidc.{{env}}.static.j2" + dest: /etc/ipsilon/root/openidc.static.cfg + owner: ipsilon + group: ipsilon + mode: "0600" + tags: + - ipsilon + - config + - oidc-config + notify: + - Restart apache + when: "env == 'staging'" - name: Copy ipsilon httpd config ansible.builtin.template: diff --git a/roles/ipsilon/templates/openidc.staging.static.j2 b/roles/ipsilon/templates/openidc.staging.static.j2 new file mode 100644 index 0000000000..d77af92129 --- /dev/null +++ b/roles/ipsilon/templates/openidc.staging.static.j2 @@ -0,0 +1,1295 @@ +[client] +python-fedora client_id=null +python-fedora client_secret="notsecret" +python-fedora client_name="Python-Fedora" +python-fedora redirect_uris=["http://localhost:12345/", "http://localhost:23456/"] +python-fedora application_type="native" +python-fedora client_uri="https://www.github.com/fedora-infra/python-fedora/" +python-fedora contacts=["puiterwijk@fedoraproject.org"] +python-fedora logo_uri=null +python-fedora policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +python-fedora tos_uri=null +python-fedora jwks_uri=null +python-fedora jwks=null +python-fedora sector_identifier_uri=null +python-fedora subject_type="public" +python-fedora response_types="code" +python-fedora grant_types="authorization_code" +python-fedora request_uris=[] +python-fedora require_auth_time=null +python-fedora token_endpoint_auth_method="client_secret_post" +python-fedora id_token_signed_response_alg="RS256" +python-fedora request_object_signing_alg="none" +python-fedora initiate_login_uri=null +python-fedora default_max_age=null +python-fedora default_acr_values=null +python-fedora client_secret_expires_at=0 +python-fedora ipsilon_internal={"type":"static","client_id":"python-fedora","trusted":false} + +kerneltest-stg client_id=null +kerneltest-stg client_secret="{{ stg_kerneltest_oidc_secret }}" +kerneltest-stg client_name="kerneltest-stg" +kerneltest-stg redirect_uris=["https://kerneltest.stg.fedoraproject.org/oidc_callback"] +kerneltest-stg application_type="native" +kerneltest-stg client_uri="https://kerneltest.stg.fedoraproject.org/" +kerneltest-stg contacts=["admin@fedoraproject.org"] +kerneltest-stg logo_uri=null +kerneltest-stg policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +kerneltest-stg tos_uri=null +kerneltest-stg jwks_uri=null +kerneltest-stg jwks=null +kerneltest-stg sector_identifier_uri=null +kerneltest-stg subject_type="public" +kerneltest-stg response_types="code" +kerneltest-stg grant_types="authorization_code" +kerneltest-stg request_uris=[] +kerneltest-stg require_auth_time=null +kerneltest-stg token_endpoint_auth_method="client_secret_post" +kerneltest-stg id_token_signed_response_alg="RS256" +kerneltest-stg request_object_signing_alg="none" +kerneltest-stg initiate_login_uri=null +kerneltest-stg default_max_age=null +kerneltest-stg default_acr_values=null +kerneltest-stg client_secret_expires_at=0 +kerneltest-stg ipsilon_internal={"type":"static","client_id":"kerneltest-stg","trusted":true} + +fedpkg client_id=null +fedpkg client_secret="notsecret" +fedpkg client_name="FedPkg" +fedpkg redirect_uris=["http://localhost:12345/", "http://localhost:23456/"] +fedpkg application_type="native" +fedpkg client_uri="http://localhost:13747/" +fedpkg contacts=["infrastructure@lists.fedoraproject.org"] +fedpkg logo_uri=null +fedpkg policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +fedpkg tos_uri=null +fedpkg jwks_uri=null +fedpkg jwks=null +fedpkg sector_identifier_uri=null +fedpkg subject_type="public" +fedpkg response_types="code" +fedpkg grant_types="authorization_code" +fedpkg request_uris=[] +fedpkg require_auth_time=null +fedpkg token_endpoint_auth_method="client_secret_post" +fedpkg id_token_signed_response_alg="RS256" +fedpkg request_object_signing_alg="none" +fedpkg initiate_login_uri=null +fedpkg default_max_age=null +fedpkg default_acr_values=null +fedpkg client_secret_expires_at=0 +fedpkg ipsilon_internal={"type":"static","client_id":"fedpkg","trusted":false} + +openshift client_id=null +openshift client_secret="{{ openshift_stg_client_secret }}" +openshift client_name="Fedora Infra Openshift (stg)" +openshift redirect_uris=["https://os.stg.fedoraproject.org:443/oauth2callback/fedoraidp"] +openshift application_type="web" +openshift client_uri="https://os.stg.fedoraproject.org/" +openshift contacts=["admin@fedoraproject.org"] +openshift logo_uri=null +openshift policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +openshift tos_uri=null +openshift jwks_uri=null +openshift jwks=null +openshift sector_identifier_uri=null +openshift subject_type="public" +openshift response_types="code" +openshift grant_types="authorization_code" +openshift request_uris=[] +openshift require_auth_time=null +openshift token_endpoint_auth_method="client_secret_post" +openshift id_token_signed_response_alg="RS256" +openshift request_object_signing_alg="none" +openshift initiate_login_uri=null +openshift default_max_age=null +openshift default_acr_values=null +openshift client_secret_expires_at=0 +openshift ipsilon_internal={"type":"static","client_id":"openshift","trusted":true} + +waiverdb-stg client_id=null +waiverdb-stg client_secret="{{ stg_waiverdb_oidc_secret }}" +waiverdb-stg client_name="Waiverdb (openshift stg)" +waiverdb-stg redirect_uris=["https://waiverdb.stg.fedoraproject.org/oidc_callback"] +waiverdb-stg application_type="web" +waiverdb-stg client_uri="https://waiverdb.stg.fedoraproject.org/" +waiverdb-stg contacts=["mjia@fedoraproject.org", "dcallagh@fedoraproject.org", "ralph@fedoraproject.org"] +waiverdb-stg logo_uri=null +waiverdb-stg policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +waiverdb-stg tos_uri=null +waiverdb-stg jwks_uri=null +waiverdb-stg jwks=null +waiverdb-stg sector_identifier_uri=null +waiverdb-stg subject_type="public" +waiverdb-stg response_types="code" +waiverdb-stg grant_types="authorization_code" +waiverdb-stg request_uris=[] +waiverdb-stg require_auth_time=null +waiverdb-stg token_endpoint_auth_method="client_secret_post" +waiverdb-stg id_token_signed_response_alg="RS256" +waiverdb-stg request_object_signing_alg="none" +waiverdb-stg initiate_login_uri=null +waiverdb-stg default_max_age=null +waiverdb-stg default_acr_values=null +waiverdb-stg client_secret_expires_at=0 +waiverdb-stg ipsilon_internal={"type":"static","client_id":"waiverdb-stg","trusted":false} + +waiverdb-authorizer client_id=null +waiverdb-authorizer client_secret="notsecret" +waiverdb-authorizer client_name="WaiverDB" +waiverdb-authorizer redirect_uris=["http://localhost:13747/", "http://localhost:12345/", "http://localhost:23456/"] +waiverdb-authorizer application_type="native" +waiverdb-authorizer client_uri="http://localhost:13747/" +waiverdb-authorizer contacts=["mjia@fedoraproject.org", "dcallagh@fedoraproject.org", "ralph@fedoraproject.org"] +waiverdb-authorizer logo_uri=null +waiverdb-authorizer policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +waiverdb-authorizer tos_uri=null +waiverdb-authorizer jwks_uri=null +waiverdb-authorizer jwks=null +waiverdb-authorizer sector_identifier_uri=null +waiverdb-authorizer subject_type="public" +waiverdb-authorizer response_types="code" +waiverdb-authorizer grant_types="authorization_code" +waiverdb-authorizer request_uris=[] +waiverdb-authorizer require_auth_time=null +waiverdb-authorizer token_endpoint_auth_method="client_secret_post" +waiverdb-authorizer id_token_signed_response_alg="RS256" +waiverdb-authorizer request_object_signing_alg="none" +waiverdb-authorizer initiate_login_uri=null +waiverdb-authorizer default_max_age=null +waiverdb-authorizer default_acr_values=null +waiverdb-authorizer client_secret_expires_at=0 +waiverdb-authorizer ipsilon_internal={"type":"static","client_id":"waiverdb-authorizer","trusted":false} + +fpwiki client_id=null +fpwiki client_secret="{{ fpwiki_stg_client_secret }}" +fpwiki client_name="FedoraProject.org wiki (STG)" +fpwiki redirect_uris=["https://stg.fedoraproject.org/wiki/Special:PluggableAuthLogin"] +fpwiki application_type="web" +fpwiki client_uri="https://stg.fedoraproject.org/wiki" +fpwiki contacts=["admin@fedoraproject.org"] +fpwiki logo_uri=null +fpwiki policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +fpwiki tos_uri=null +fpwiki jwks_uri=null +fpwiki jwks=null +fpwiki sector_identifier_uri=null +fpwiki subject_type="public" +fpwiki response_types="code" +fpwiki grant_types="authorization_code" +fpwiki request_uris=[] +fpwiki require_auth_time=null +fpwiki token_endpoint_auth_method="client_secret_basic" +fpwiki id_token_signed_response_alg="RS256" +fpwiki request_object_signing_alg="none" +fpwiki initiate_login_uri=null +fpwiki default_max_age=null +fpwiki default_acr_values=null +fpwiki client_secret_expires_at=0 +fpwiki ipsilon_internal={"type":"static","client_id":"fpwiki","trusted":true} + +wikitcms client_id=null +wikitcms client_secret="notsecret" +wikitcms client_name="Wiki Test Control Management System" +wikitcms redirect_uris=["http://localhost:13747/", "http://localhost:12345/", "http://localhost:23456/"] +wikitcms application_type="native" +wikitcms client_uri="https://pagure.io/fedora-qa/python-wikitcms" +wikitcms contacts=["adamwill@fedoraproject.org"] +wikitcms logo_uri=null +wikitcms policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +wikitcms tos_uri=null +wikitcms jwks_uri=null +wikitcms jwks=null +wikitcms sector_identifier_uri=null +wikitcms subject_type="public" +wikitcms response_types="code" +wikitcms grant_types="authorization_code" +wikitcms request_uris=[] +wikitcms require_auth_time=null +wikitcms token_endpoint_auth_method="client_secret_post" +wikitcms id_token_signed_response_alg="RS256" +wikitcms request_object_signing_alg="none" +wikitcms initiate_login_uri=null +wikitcms default_max_age=null +wikitcms default_acr_values=null +wikitcms client_secret_expires_at=0 +wikitcms ipsilon_internal={"type":"static","client_id":"wikitcms","trusted":false} + +koschei client_id=null +koschei client_secret="{{ koschei_oidc_client_secret_stg }}" +koschei client_name="Koschei (STG)" +koschei redirect_uris=["https://koschei.stg.fedoraproject.org/login/redirect_uri"] +koschei application_type="web" +koschei client_uri="https://apps.stg.fedoraproject.org/koschei/" +koschei contacts=["admin@fedoraproject.org"] +koschei logo_uri=null +koschei policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +koschei tos_uri=null +koschei jwks_uri=null +koschei jwks=null +koschei sector_identifier_uri=null +koschei subject_type="pairwise" +koschei response_types="code" +koschei grant_types="authorization_code" +koschei request_uris=[] +koschei require_auth_time=null +koschei token_endpoint_auth_method="client_secret_basic" +koschei id_token_signed_response_alg="RS256" +koschei request_object_signing_alg="none" +koschei initiate_login_uri=null +koschei default_max_age=null +koschei default_acr_values=null +koschei client_secret_expires_at=0 +koschei ipsilon_internal={"type":"static","client_id":"koschei","trusted":true} + +src-verifier client_id=null +src-verifier client_secret="{{ distgit_oidc_src_verifier_secret_stg }}" +src-verifier client_name="Fedora Dist-Git Verifier" +src-verifier redirect_uris=[] +src-verifier application_type="web" +src-verifier client_uri="https://src.stg.fedoraproject.org/" +src-verifier contacts=["admin@fedoraproject.org"] +src-verifier logo_uri=null +src-verifier policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +src-verifier tos_uri=null +src-verifier jwks_uri=null +src-verifier jwks=null +src-verifier sector_identifier_uri=null +src-verifier subject_type="pairwise" +src-verifier response_types="code" +src-verifier grant_types="authorization_code" +src-verifier request_uris=[] +src-verifier require_auth_time=null +src-verifier token_endpoint_auth_method="client_secret_basic" +src-verifier id_token_signed_response_alg="RS256" +src-verifier request_object_signing_alg="none" +src-verifier initiate_login_uri=null +src-verifier default_max_age=null +src-verifier default_acr_values=null +src-verifier client_secret_expires_at=0 +src-verifier ipsilon_internal={"type":"static","client_id":"src-verifier","trusted":true} + +fedpkg-authorizer client_id=null +fedpkg-authorizer client_secret="notsecret" +fedpkg-authorizer client_name="FedPkg" +fedpkg-authorizer redirect_uris=["http://localhost:13747/", "http://localhost:12345/", "http://localhost:23456/"] +fedpkg-authorizer application_type="native" +fedpkg-authorizer client_uri="http://localhost:13747/" +fedpkg-authorizer contacts=["admin@fedoraproject.org"] +fedpkg-authorizer logo_uri=null +fedpkg-authorizer policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +fedpkg-authorizer tos_uri=null +fedpkg-authorizer jwks_uri=null +fedpkg-authorizer jwks=null +fedpkg-authorizer sector_identifier_uri=null +fedpkg-authorizer subject_type="public" +fedpkg-authorizer response_types="code" +fedpkg-authorizer grant_types="authorization_code" +fedpkg-authorizer request_uris=[] +fedpkg-authorizer require_auth_time=null +fedpkg-authorizer token_endpoint_auth_method="client_secret_post" +fedpkg-authorizer id_token_signed_response_alg="RS256" +fedpkg-authorizer request_object_signing_alg="none" +fedpkg-authorizer initiate_login_uri=null +fedpkg-authorizer default_max_age=null +fedpkg-authorizer default_acr_values=null +fedpkg-authorizer client_secret_expires_at=0 +fedpkg-authorizer ipsilon_internal={"type":"static","client_id":"fedpkg-authorizer","trusted":false} + +transtats-stg client_id=null +transtats-stg client_secret="{{ transtats_stg_oidc_secret }}" +transtats-stg client_name="Transtats (openshift stg)" +transtats-stg redirect_uris=["https://transtats.stg.fedoraproject.org/oidc/callback/"] +transtats-stg application_type="web" +transtats-stg client_uri="https://transtats.stg.fedoraproject.org/" +transtats-stg contacts=["suanand@redhat.com"] +transtats-stg logo_uri=null +transtats-stg policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +transtats-stg tos_uri=null +transtats-stg jwks_uri=null +transtats-stg jwks=null +transtats-stg sector_identifier_uri=null +transtats-stg subject_type="pairwise" +transtats-stg response_types="code" +transtats-stg grant_types="authorization_code" +transtats-stg request_uris=[] +transtats-stg require_auth_time=null +transtats-stg token_endpoint_auth_method="client_secret_post" +transtats-stg id_token_signed_response_alg="RS256" +transtats-stg request_object_signing_alg="none" +transtats-stg initiate_login_uri=null +transtats-stg default_max_age=null +transtats-stg default_acr_values=null +transtats-stg client_secret_expires_at=0 +transtats-stg ipsilon_internal={"type":"static","client_id":"transtats-stg","trusted":false} + +elections client_id=null +elections client_secret="{{ elections_oidc_client_secret_stg }}" +elections client_name="Elections" +elections redirect_uris=["https://elections.stg.fedoraproject.org/oidc_callback", "https://elections.stg.fedoraproject.org/authorize"] +elections application_type="web" +elections client_uri="https://elections.stg.fedoraproject.org/" +elections contacts=["admin@fedoraproject.org"] +elections logo_uri=null +elections policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +elections tos_uri=null +elections jwks_uri=null +elections jwks=null +elections sector_identifier_uri=null +elections subject_type="pairwise" +elections response_types="code" +elections grant_types="authorization_code" +elections request_uris=[] +elections require_auth_time=null +elections token_endpoint_auth_method="client_secret_post" +elections id_token_signed_response_alg="RS256" +elections request_object_signing_alg="none" +elections initiate_login_uri=null +elections default_max_age=null +elections default_acr_values=null +elections client_secret_expires_at=0 +elections ipsilon_internal={"type":"static","client_id":"elections","trusted":true} + +fedocal client_name="fedocal" +fedocal client_secret="{{ fedocal_oidc_client_secret_stg }}" +fedocal redirect_uris=["https://calendar.stg.fedoraproject.org/oidc_callback"] +fedocal client_uri="https://calendar.stg.fedoraproject.org/" +fedocal ipsilon_internal={"type":"static","client_id":"fedocal","trusted":true} +fedocal contacts=["admin@fedoraproject.org"] +fedocal client_id=null +fedocal policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +fedocal grant_types="authorization_code" +fedocal response_types="code" +fedocal application_type="web" +fedocal logo_uri=null +fedocal tos_uri=null +fedocal jwks_uri=null +fedocal jwks=null +fedocal sector_identifier_uri=null +fedocal subject_type="pairwise" +fedocal request_uris=[] +fedocal require_auth_time=null +fedocal token_endpoint_auth_method="client_secret_post" +fedocal id_token_signed_response_alg="RS256" +fedocal request_object_signing_alg="none" +fedocal initiate_login_uri=null +fedocal default_max_age=null +fedocal default_acr_values=null +fedocal client_secret_expires_at=0 + +osci-jenkins-1-stage client_name="osci-jenkins-1-stage" +osci-jenkins-1-stage client_secret="{{ osci_jenkins_1_stage_oidc_secret }}" +osci-jenkins-1-stage redirect_uris=["https://osci-jenkins-1-stage.ci.fedoraproject.org/securityRealm/finishLogin"] +osci-jenkins-1-stage client_uri="https://osci-jenkins-1-stage.ci.fedoraproject.org/" +osci-jenkins-1-stage ipsilon_internal={"type":"static","client_id":"osci-jenkins-1-stage","trusted":true} +osci-jenkins-1-stage contacts=["ci@lists.fedoraproject.org", "admin@fedoraproject.org"] +osci-jenkins-1-stage client_id=null +osci-jenkins-1-stage policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +osci-jenkins-1-stage grant_types="authorization_code" +osci-jenkins-1-stage response_types="code" +osci-jenkins-1-stage application_type="web" +osci-jenkins-1-stage subject_type="pairwise" +osci-jenkins-1-stage logo_uri=null +osci-jenkins-1-stage tos_uri=null +osci-jenkins-1-stage jwks_uri=null +osci-jenkins-1-stage jwks=null +osci-jenkins-1-stage sector_identifier_uri=null +osci-jenkins-1-stage request_uris=[] +osci-jenkins-1-stage require_auth_time=null +osci-jenkins-1-stage token_endpoint_auth_method="client_secret_post" +osci-jenkins-1-stage id_token_signed_response_alg="RS256" +osci-jenkins-1-stage request_object_signing_alg="none" +osci-jenkins-1-stage initiate_login_uri=null +osci-jenkins-1-stage default_max_age=null +osci-jenkins-1-stage default_acr_values=null +osci-jenkins-1-stage client_secret_expires_at=0 + +osci-jenkins-2-stage client_name="osci-jenkins-2-stage" +osci-jenkins-2-stage client_secret="{{ osci_jenkins_2_stage_oidc_secret }}" +osci-jenkins-2-stage redirect_uris=["https://osci-jenkins-2-stage.ci.fedoraproject.org/securityRealm/finishLogin"] +osci-jenkins-2-stage client_uri="https://osci-jenkins-2-stage.ci.fedoraproject.org/" +osci-jenkins-2-stage ipsilon_internal={"type":"static","client_id":"osci-jenkins-2-stage","trusted":true} +osci-jenkins-2-stage contacts=["ci@lists.fedoraproject.org", "admin@fedoraproject.org"] +osci-jenkins-2-stage client_id=null +osci-jenkins-2-stage policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +osci-jenkins-2-stage grant_types="authorization_code" +osci-jenkins-2-stage response_types="code" +osci-jenkins-2-stage application_type="web" +osci-jenkins-2-stage subject_type="pairwise" +osci-jenkins-2-stage logo_uri=null +osci-jenkins-2-stage tos_uri=null +osci-jenkins-2-stage jwks_uri=null +osci-jenkins-2-stage jwks=null +osci-jenkins-2-stage sector_identifier_uri=null +osci-jenkins-2-stage request_uris=[] +osci-jenkins-2-stage require_auth_time=null +osci-jenkins-2-stage token_endpoint_auth_method="client_secret_post" +osci-jenkins-2-stage id_token_signed_response_alg="RS256" +osci-jenkins-2-stage request_object_signing_alg="none" +osci-jenkins-2-stage initiate_login_uri=null +osci-jenkins-2-stage default_max_age=null +osci-jenkins-2-stage default_acr_values=null +osci-jenkins-2-stage client_secret_expires_at=0 + +test-auth client_id=null +test-auth client_name="test-auth" +test-auth client_secret="{{ test_auth_stg_oidc_client_secret }}" +test-auth redirect_uris=["https://test-auth.app.os.stg.fedoraproject.org/oidc/oidc_callback"] +test-auth client_uri="https://test-auth.app.os.stg.fedoraproject.org/" +test-auth ipsilon_internal={"type":"static","client_id":"test-auth","trusted":true} +test-auth contacts=["admin@fedoraproject.org"] +test-auth policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +test-auth grant_types="authorization_code" +test-auth response_types="code" +test-auth application_type="web" +test-auth logo_uri=null +test-auth tos_uri=null +test-auth jwks_uri=null +test-auth jwks=null +test-auth sector_identifier_uri=null +test-auth subject_type="public" +test-auth request_uris=[] +test-auth require_auth_time=null +test-auth token_endpoint_auth_method="client_secret_post" +test-auth id_token_signed_response_alg="RS256" +test-auth request_object_signing_alg="none" +test-auth initiate_login_uri=null +test-auth default_max_age=null +test-auth default_acr_values=null +test-auth client_secret_expires_at=0 + +provisionfpo client_name="provisionfpo" +provisionfpo client_secret="{{ zezere_oidc_client_secret_staging }}" +provisionfpo redirect_uris=["https://provision.stg.fedoraproject.org/oidc/callback/"] +provisionfpo client_uri="https://provision.stg.fedoraproject.org/portal/" +provisionfpo ipsilon_internal={"type":"static","client_id":"provisionfpo","trusted":true} +provisionfpo contacts=["admin@fedoraproject.org"] +provisionfpo client_id=null +provisionfpo policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +provisionfpo grant_types="authorization_code" +provisionfpo response_types="code" +provisionfpo application_type="web" +provisionfpo logo_uri=null +provisionfpo tos_uri=null +provisionfpo jwks_uri=null +provisionfpo jwks=null +provisionfpo sector_identifier_uri=null +provisionfpo subject_type="public" +provisionfpo request_uris=[] +provisionfpo require_auth_time=null +provisionfpo token_endpoint_auth_method="client_secret_post" +provisionfpo id_token_signed_response_alg="RS256" +provisionfpo request_object_signing_alg="none" +provisionfpo initiate_login_uri=null +provisionfpo default_max_age=null +provisionfpo default_acr_values=null +provisionfpo client_secret_expires_at=0 + +oraculum client_name="oraculum" +oraculum client_secret="{{ oraculum_oidc_client_secret_stg }}" +oraculum redirect_uris=["https://packager-dashboard.stg.fedoraproject.org/api/flask_oidc/authorize"] +oraculum client_uri="https://oraculum.stg.fedoraproject.org/" +oraculum ipsilon_internal={"type":"static","client_id":"oraculum","trusted":true} +oraculum contacts=["fzatlouk@redhat.com"] +oraculum client_id=null +oraculum policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +oraculum grant_types="authorization_code" +oraculum response_types="code" +oraculum application_type="web" +oraculum subject_type="pairwise" +oraculum logo_uri=null +oraculum tos_uri=null +oraculum jwks_uri=null +oraculum jwks=null +oraculum sector_identifier_uri=null +oraculum request_uris=[] +oraculum require_auth_time=null +oraculum token_endpoint_auth_method="client_secret_post" +oraculum id_token_signed_response_alg="RS256" +oraculum request_object_signing_alg="none" +oraculum initiate_login_uri=null +oraculum default_max_age=null +oraculum default_acr_values=null +oraculum client_secret_expires_at=0 + +forum-mojefedora-cz client_name="forum-mojefedora-cz" +forum-mojefedora-cz client_secret="{{ forum_mojefedora_cz_oidc_secret }}" +forum-mojefedora-cz redirect_uris=["https://forum.mojefedora.cz/auth/oauth2_basic/callback"] +forum-mojefedora-cz client_uri="https://forum-mojefedora-cz.fedoraproject.org/" +forum-mojefedora-cz ipsilon_internal={"type":"static","client_id":"forum-mojefedora-cz","trusted":false} +forum-mojefedora-cz contacts=["frantisekz@fedoraproject.org"] +forum-mojefedora-cz client_id=null +forum-mojefedora-cz policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +forum-mojefedora-cz grant_types="authorization_code" +forum-mojefedora-cz response_types="code" +forum-mojefedora-cz application_type="web" +forum-mojefedora-cz subject_type="pairwise" +forum-mojefedora-cz logo_uri=null +forum-mojefedora-cz tos_uri=null +forum-mojefedora-cz jwks_uri=null +forum-mojefedora-cz jwks=null +forum-mojefedora-cz sector_identifier_uri=null +forum-mojefedora-cz request_uris=[] +forum-mojefedora-cz require_auth_time=null +forum-mojefedora-cz token_endpoint_auth_method="client_secret_basic" +forum-mojefedora-cz id_token_signed_response_alg="RS256" +forum-mojefedora-cz request_object_signing_alg="none" +forum-mojefedora-cz initiate_login_uri=null +forum-mojefedora-cz default_max_age=null +forum-mojefedora-cz default_acr_values=null +forum-mojefedora-cz client_secret_expires_at=0 + +element client_name="element" +element client_secret="{{ element_stg_oidc_secret }}" +element redirect_uris=["https://fedora-test-sso.ems.host/_synapse/client/oidc/callback"] +element client_uri="https://fedora.ems.host/" +element ipsilon_internal={"type":"static","client_id":"element","trusted":true} +element contacts=["{{ element_oidc_contact }}"] +element client_id=null +element policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +element grant_types="authorization_code" +element response_types="code" +element application_type="web" +element subject_type="public" +element logo_uri=null +element tos_uri=null +element jwks_uri=null +element jwks=null +element sector_identifier_uri=null +element request_uris=[] +element require_auth_time=null +element token_endpoint_auth_method="client_secret_basic" +element id_token_signed_response_alg="RS256" +element request_object_signing_alg="none" +element initiate_login_uri=null +element default_max_age=null +element default_acr_values=null +element client_secret_expires_at=0 + +ocp client_id=null +ocp client_secret="{{ ocp_stg_oidc_secret }}" +ocp client_name="Fedora Staging OCP" +ocp redirect_uris=["https://oauth-openshift.apps.ocp.stg.fedoraproject.org/oauth2callback/fedoraidp"] +ocp application_type="web" +ocp client_uri="https://ocp.stg.fedoraproject.org/" +ocp contacts=["admin@fedoraproject.org"] +ocp logo_uri=null +ocp policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +ocp tos_uri=null +ocp jwks_uri=null +ocp jwks=null +ocp sector_identifier_uri=null +ocp subject_type="public" +ocp response_types="code" +ocp grant_types="authorization_code" +ocp request_uris=[] +ocp require_auth_time=null +ocp token_endpoint_auth_method="client_secret_post" +ocp id_token_signed_response_alg="RS256" +ocp request_object_signing_alg="none" +ocp initiate_login_uri=null +ocp default_max_age=null +ocp default_acr_values=null +ocp client_secret_expires_at=0 +ocp ipsilon_internal={"type":"static","client_id":"ocp","trusted":true} + +anitya client_name="anitya staging" +anitya client_secret="{{ anitya_oidc_client_secret_stg }}" +anitya redirect_uris=["https://stg.release-monitoring.org/auth/fedora"] +anitya client_uri="https://srg.release-monitoring.org/" +anitya ipsilon_internal={"type":"static","client_id":"anitya","trusted":true} +anitya contacts=["mkonecny@fedoraproject.org"] +anitya client_id=null +anitya policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +anitya grant_types="authorization_code" +anitya response_types="code" +anitya application_type="web" +anitya subject_type="public" +anitya logo_uri=null +anitya tos_uri=null +anitya jwks_uri=null +anitya jwks=null +anitya sector_identifier_uri=null +anitya request_uris=[] +anitya require_auth_time=null +anitya token_endpoint_auth_method="client_secret_post" +anitya id_token_signed_response_alg="RS256" +anitya request_object_signing_alg="none" +anitya initiate_login_uri=null +anitya default_max_age=null +anitya default_acr_values=null +anitya client_secret_expires_at=0 + +bodhi client_name="Bodhi staging" +bodhi client_secret="{{ bodhi2_oidc_client_secret_staging }}" +bodhi redirect_uris=["https://bodhi.stg.fedoraproject.org/oidc/authorize"] +bodhi client_uri="https://bodhi.stg.fedoraproject.org/" +bodhi ipsilon_internal={"type":"static","client_id":"bodhi","trusted":true} +bodhi contacts=["admin@fedoraproject.org"] +bodhi client_id=null +bodhi policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +bodhi grant_types="authorization_code" +bodhi response_types="code" +bodhi application_type="web" +bodhi subject_type="public" +bodhi logo_uri=null +bodhi tos_uri=null +bodhi jwks_uri=null +bodhi jwks=null +bodhi sector_identifier_uri=null +bodhi request_uris=[] +bodhi require_auth_time=null +bodhi token_endpoint_auth_method="client_secret_post" +bodhi id_token_signed_response_alg="RS256" +bodhi request_object_signing_alg="none" +bodhi initiate_login_uri=null +bodhi default_max_age=null +bodhi default_acr_values=null +bodhi client_secret_expires_at=0 + +bodhi-client client_name="Bodhi Client staging" +bodhi-client client_secret="" +bodhi-client redirect_uris=["urn:ietf:wg:oauth:2.0:oob"] +bodhi-client client_uri="https://bodhi.stg.fedoraproject.org/" +bodhi-client ipsilon_internal={"type":"static","client_id":"bodhi-client","trusted":true} +bodhi-client contacts=["admin@fedoraproject.org"] +bodhi-client client_id=null +bodhi-client policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +bodhi-client grant_types="authorization_code" +bodhi-client response_types="code" +bodhi-client application_type="native" +bodhi-client subject_type="public" +bodhi-client logo_uri=null +bodhi-client tos_uri=null +bodhi-client jwks_uri=null +bodhi-client jwks=null +bodhi-client sector_identifier_uri=null +bodhi-client request_uris=[] +bodhi-client require_auth_time=null +bodhi-client token_endpoint_auth_method="none" +bodhi-client id_token_signed_response_alg="RS256" +bodhi-client request_object_signing_alg="none" +bodhi-client initiate_login_uri=null +bodhi-client default_max_age=null +bodhi-client default_acr_values=null +bodhi-client client_secret_expires_at=0 + +flask-oidc-dev client_id=null +flask-oidc-dev client_secret="{{ flask_oidc_dev_stg_oidc_client_secret }}" +flask-oidc-dev client_name="Flask OIDC dev in Staging" +flask-oidc-dev redirect_uris=["https://app-flask-oidc-dev.apps.ocp.stg.fedoraproject.org/oidc/oidc_callback"] +flask-oidc-dev application_type="web" +flask-oidc-dev client_uri="https://app-flask-oidc-dev.apps.ocp.stg.fedoraproject.org/" +flask-oidc-dev contacts=["admin@fedoraproject.org"] +flask-oidc-dev logo_uri=null +flask-oidc-dev policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +flask-oidc-dev tos_uri=null +flask-oidc-dev jwks_uri=null +flask-oidc-dev jwks=null +flask-oidc-dev sector_identifier_uri=null +flask-oidc-dev subject_type="public" +flask-oidc-dev response_types="code" +flask-oidc-dev grant_types="authorization_code" +flask-oidc-dev request_uris=[] +flask-oidc-dev require_auth_time=null +flask-oidc-dev token_endpoint_auth_method="client_secret_post" +flask-oidc-dev id_token_signed_response_alg="RS256" +flask-oidc-dev request_object_signing_alg="none" +flask-oidc-dev initiate_login_uri=null +flask-oidc-dev default_max_age=null +flask-oidc-dev default_acr_values=null +flask-oidc-dev client_secret_expires_at=0 +flask-oidc-dev ipsilon_internal={"type":"static","client_id":"flask-oidc-dev","trusted":true} + +osbs client_name="OSBS staging" +osbs client_secret="" +osbs redirect_uris=["urn:ietf:wg:oauth:2.0:oob"] +osbs client_uri="https://osbs.stg.fedoraproject.org/" +osbs ipsilon_internal={"type":"static","client_id":"osbs","trusted":true} +osbs contacts=["admin@fedoraproject.org"] +osbs client_id=null +osbs policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +osbs grant_types="authorization_code" +osbs response_types="code" +osbs application_type="native" +osbs subject_type="public" +osbs logo_uri=null +osbs tos_uri=null +osbs jwks_uri=null +osbs jwks=null +osbs sector_identifier_uri=null +osbs request_uris=[] +osbs require_auth_time=null +osbs token_endpoint_auth_method="none" +osbs id_token_signed_response_alg="RS256" +osbs request_object_signing_alg="none" +osbs initiate_login_uri=null +osbs default_max_age=null +osbs default_acr_values=null +osbs client_secret_expires_at=0 + +fmn client_id=null +fmn client_secret="{{ fmn_stg_oidc_client_secret }}" +fmn client_name="Fedora Messaging Notifications" +fmn redirect_uris=["https://notifications.stg.fedoraproject.org/login/fedora", "https://fmn.apps.ocp.stg.fedoraproject.org/login/fedora"] +fmn application_type="web" +fmn client_uri="https://notifications.stg.fedoraproject.org/" +fmn contacts=["admin@fedoraproject.org"] +fmn logo_uri=null +fmn policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +fmn tos_uri=null +fmn jwks_uri=null +fmn jwks=null +fmn sector_identifier_uri=null +fmn subject_type="public" +fmn response_types="code" +fmn grant_types="authorization_code" +fmn request_uris=[] +fmn require_auth_time=null +fmn token_endpoint_auth_method="client_secret_post" +fmn id_token_signed_response_alg="RS256" +fmn request_object_signing_alg="none" +fmn initiate_login_uri=null +fmn default_max_age=null +fmn default_acr_values=null +fmn client_secret_expires_at=0 +fmn ipsilon_internal={"type":"static","client_id":"fmn","trusted":true} + +fmn-frontend client_name="Fedora Notifications" +fmn-frontend client_secret="" +fmn-frontend redirect_uris=["https://notifications.stg.fedoraproject.org/login/fedora", "https://fmn.apps.ocp.stg.fedoraproject.org/login/fedora"] +fmn-frontend client_uri="https://notifications.stg.fedoraproject.org/" +fmn-frontend ipsilon_internal={"type":"static","client_id":"fmn-frontend","trusted":true} +fmn-frontend contacts=["admin@fedoraproject.org"] +fmn-frontend client_id=null +fmn-frontend policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +fmn-frontend grant_types="authorization_code" +fmn-frontend response_types="code" +fmn-frontend application_type="native" +fmn-frontend subject_type="public" +fmn-frontend logo_uri=null +fmn-frontend tos_uri=null +fmn-frontend jwks_uri=null +fmn-frontend jwks=null +fmn-frontend sector_identifier_uri=null +fmn-frontend request_uris=[] +fmn-frontend require_auth_time=null +fmn-frontend token_endpoint_auth_method="none" +fmn-frontend id_token_signed_response_alg="RS256" +fmn-frontend request_object_signing_alg="none" +fmn-frontend initiate_login_uri=null +fmn-frontend default_max_age=null +fmn-frontend default_acr_values=null +fmn-frontend client_secret_expires_at=0 + +askdiscourse client_id="askdiscourse" +askdiscourse client_secret="{{ askdiscourse_stg_oidc_secret }}" +askdiscourse client_name="Ask Fedora Staging" +askdiscourse redirect_uris=["https://fedoraproject.staged-by-discourse.com/auth/oauth2_basic/callback"] +askdiscourse application_type="web" +askdiscourse client_uri="https://ask.fedoraproject.org/" +askdiscourse contacts=["admin@fedoraproject.org"] +askdiscourse logo_uri=null +askdiscourse policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +askdiscourse tos_uri=null +askdiscourse jwks_uri=null +askdiscourse jwks=null +askdiscourse sector_identifier_uri="https://fedoraproject.staged-by-discourse.com/" +askdiscourse subject_type="pairwise" +askdiscourse response_types="code" +askdiscourse grant_types="authorization_code" +askdiscourse request_uris=[] +askdiscourse require_auth_time=null +askdiscourse token_endpoint_auth_method="client_secret_basic" +askdiscourse id_token_signed_response_alg="RS256" +askdiscourse request_object_signing_alg="none" +askdiscourse initiate_login_uri=null +askdiscourse default_max_age=null +askdiscourse default_acr_values=null +askdiscourse client_secret_expires_at=0 +askdiscourse ipsilon_internal={"type":"static","client_id":"askdiscourse","trusted":true} + +pagure client_id="pagure" +pagure client_secret="{{ pagure_stg_oidc_client_secret }}" +pagure client_name="Pagure Staging" +pagure redirect_uris=["https://stg.pagure.io/oidc_callback", "https://stg.pagure.io/authorize"] +pagure application_type="web" +pagure client_uri="https://stg.pagure.io/" +pagure contacts=["admin@fedoraproject.org"] +pagure logo_uri=null +pagure policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +pagure tos_uri=null +pagure jwks_uri=null +pagure jwks=null +pagure sector_identifier_uri="https://stg.pagure.io/" +pagure subject_type="pairwise" +pagure response_types="code" +pagure grant_types="authorization_code" +pagure request_uris=[] +pagure require_auth_time=null +pagure token_endpoint_auth_method="client_secret_post" +pagure id_token_signed_response_alg="RS256" +pagure request_object_signing_alg="none" +pagure initiate_login_uri=null +pagure default_max_age=null +pagure default_acr_values=null +pagure client_secret_expires_at=0 +pagure ipsilon_internal={"type":"static","client_id":"pagure","trusted":true} + +consolerhc client_id="consolerhc" +consolerhc client_secret="{{ consolerhc_stg_oidc_secret }}" +consolerhc client_name="Red Hat Console" +consolerhc redirect_uris=["https://console.stg.fedorainfracloud.org/authorize"] +consolerhc application_type="web" +consolerhc client_uri="https://www.osbuild.org/guides/introduction.html" +consolerhc contacts=["osbuilders@redhat.com"] +consolerhc logo_uri="https://www.osbuild.org/images/osbuild.png" +consolerhc policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +consolerhc tos_uri=null +consolerhc jwks_uri=null +consolerhc jwks=null +consolerhc sector_identifier_uri="consolerhc" +consolerhc subject_type="pairwise" +consolerhc response_types="code" +consolerhc grant_types="authorization_code" +consolerhc request_uris=[] +consolerhc require_auth_time=null +consolerhc token_endpoint_auth_method="client_secret_post" +consolerhc id_token_signed_response_alg="RS256" +consolerhc request_object_signing_alg="none" +consolerhc initiate_login_uri=null +consolerhc default_max_age=null +consolerhc default_acr_values=null +consolerhc client_secret_expires_at=0 +consolerhc ipsilon_internal={"type":"static","client_id":"consolerhc","trusted":false} + +consolerhc-cli client_id="consolerhc-cli" +consolerhc-cli client_secret="notsecret" +consolerhc-cli client_name="Red Hat Console CLI" +consolerhc-cli redirect_uris=["urn:ietf:wg:oauth:2.0:oob", "https://console.stg.foo.fedorainfracloud.org:1337/", "https://console.stg.fedorainfracloud.org/"] +consolerhc-cli application_type="native" +consolerhc-cli client_uri="https://www.osbuild.org/guides/introduction.html" +consolerhc-cli contacts=["osbuilders@redhat.com"] +consolerhc-cli logo_uri="https://www.osbuild.org/images/osbuild.png" +consolerhc-cli policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +consolerhc-cli tos_uri=null +consolerhc-cli jwks_uri=null +consolerhc-cli jwks=null +consolerhc-cli sector_identifier_uri="https://console.stg.fedorainfracloud.org" +consolerhc-cli subject_type="pairwise" +consolerhc-cli response_types="code" +consolerhc-cli grant_types="authorization_code" +consolerhc-cli request_uris=[] +consolerhc-cli require_auth_time=null +consolerhc-cli token_endpoint_auth_method="none" +consolerhc-cli id_token_signed_response_alg="RS256" +consolerhc-cli request_object_signing_alg="none" +consolerhc-cli initiate_login_uri=null +consolerhc-cli default_max_age=null +consolerhc-cli default_acr_values=null +consolerhc-cli client_secret_expires_at=0 +consolerhc-cli ipsilon_internal={"type":"static","client_id":"consolerhc-cli","trusted":false} + +mirrormanager client_name="Mirror Manager" +mirrormanager client_id=null +mirrormanager client_secret="{{ mirrormanager_stg_oidc_client_secret }}" +mirrormanager redirect_uris=["https://mirrormanager.stg.fedoraproject.org/oidc/authorize", "https://mirrormanager.apps.ocp.stg.fedoraproject.org/oidc/authorize"] +mirrormanager application_type="web" +mirrormanager client_uri="https://mirrors.apps.ocp.stg.fedoraproject.org/" +mirrormanager contacts=["admin@fedoraproject.org"] +mirrormanager logo_uri=null +mirrormanager policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +mirrormanager tos_uri=null +mirrormanager jwks_uri=null +mirrormanager jwks=null +mirrormanager sector_identifier_uri=null +mirrormanager subject_type="public" +mirrormanager response_types="code" +mirrormanager grant_types="authorization_code" +mirrormanager request_uris=[] +mirrormanager require_auth_time=null +mirrormanager token_endpoint_auth_method="client_secret_post" +mirrormanager id_token_signed_response_alg="RS256" +mirrormanager request_object_signing_alg="none" +mirrormanager initiate_login_uri=null +mirrormanager default_max_age=null +mirrormanager default_acr_values=null +mirrormanager client_secret_expires_at=0 +mirrormanager ipsilon_internal={"type":"static","client_id":"mirrormanager","trusted":true} + +tahrir client_name="Badges Staging" +tahrir client_secret="{{ tahrir_oidc_client_secret_staging }}" +tahrir redirect_uris=["https://badges.stg.fedoraproject.org/oidc/authorize", "https://badges.apps.ocp.stg.fedoraproject.org/oidc/authorize"] +tahrir client_uri="https://badges.stg.fedoraproject.org/" +tahrir ipsilon_internal={"type":"static","client_id":"tahrir","trusted":true} +tahrir contacts=["admin@fedoraproject.org"] +tahrir client_id=null +tahrir policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +tahrir grant_types="authorization_code" +tahrir response_types="code" +tahrir application_type="web" +tahrir subject_type="public" +tahrir logo_uri=null +tahrir tos_uri=null +tahrir jwks_uri=null +tahrir jwks=null +tahrir sector_identifier_uri=null +tahrir request_uris=[] +tahrir require_auth_time=null +tahrir token_endpoint_auth_method="client_secret_post" +tahrir id_token_signed_response_alg="RS256" +tahrir request_object_signing_alg="none" +tahrir initiate_login_uri=null +tahrir default_max_age=null +tahrir default_acr_values=null +tahrir client_secret_expires_at=0 + +mailman3 client_name="Mailman Staging" +mailman3 client_secret="{{ mailman_stg_oidc_pass }}" +mailman3 redirect_uris=["https://lists.stg.fedoraproject.org/accounts/fedora/login/callback/", "https://lists.stg.fedorahosted.org/accounts/fedora/login/callback/", "https://lists.stg.pagure.io/accounts/fedora/login/callback/"] +mailman3 client_uri="https://lists.stg.fedoraproject.org/" +mailman3 ipsilon_internal={"type":"static","client_id":"mailman3","trusted":true} +mailman3 contacts=["admin@fedoraproject.org"] +mailman3 client_id=null +mailman3 policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +mailman3 grant_types="authorization_code" +mailman3 response_types="code" +mailman3 application_type="web" +mailman3 subject_type="public" +mailman3 logo_uri=null +mailman3 tos_uri=null +mailman3 jwks_uri=null +mailman3 jwks=null +mailman3 sector_identifier_uri=null +mailman3 request_uris=[] +mailman3 require_auth_time=null +mailman3 token_endpoint_auth_method="client_secret_post" +mailman3 id_token_signed_response_alg="RS256" +mailman3 request_object_signing_alg="none" +mailman3 initiate_login_uri=null +mailman3 default_max_age=null +mailman3 default_acr_values=null +mailman3 client_secret_expires_at=0 + +kanban-qa client_name="QA Kanban Staging" +kanban-qa client_secret="{{ kanban_oidc_secret_stg }}" +kanban-qa redirect_uris=["https://kanban.qa.stg.fedoraproject.org/flask_oidc/authorize"] +kanban-qa client_uri="https://kanban.qa.stg.fedoraproject.org/" +kanban-qa ipsilon_internal={"type":"static","client_id":"kanban-qa","trusted":true} +kanban-qa contacts=["fzatlouk@redhat.com"] +kanban-qa client_id=null +kanban-qa policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +kanban-qa grant_types="authorization_code" +kanban-qa response_types="code" +kanban-qa application_type="web" +kanban-qa subject_type="public" +kanban-qa logo_uri=null +kanban-qa tos_uri=null +kanban-qa jwks_uri=null +kanban-qa jwks=null +kanban-qa sector_identifier_uri=null +kanban-qa request_uris=[] +kanban-qa require_auth_time=null +kanban-qa token_endpoint_auth_method="client_secret_post" +kanban-qa id_token_signed_response_alg="RS256" +kanban-qa request_object_signing_alg="none" +kanban-qa initiate_login_uri=null +kanban-qa default_max_age=null +kanban-qa default_acr_values=null +kanban-qa client_secret_expires_at=0 + +testing-farm client_name="Testing Farm (staging)" +testing-farm client_secret="{{ testing_farm_oidc_secret_stg }}" +testing-farm redirect_uris=["https://api.staging.testing-farm.io/login/fedora/callback"] +testing-farm client_uri="https://api.staging.testing-farm.io/" +testing-farm ipsilon_internal={"type":"static","client_id":"testing-farm","trusted":true} +testing-farm contacts=["tft@redhat.com"] +testing-farm client_id=null +testing-farm policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +testing-farm grant_types="authorization_code" +testing-farm response_types="code" +testing-farm application_type="web" +testing-farm subject_type="public" +testing-farm logo_uri=null +testing-farm tos_uri=null +testing-farm jwks_uri=null +testing-farm jwks=null +testing-farm sector_identifier_uri=null +testing-farm request_uris=[] +testing-farm require_auth_time=null +testing-farm token_endpoint_auth_method="client_secret_post" +testing-farm id_token_signed_response_alg="RS256" +testing-farm request_object_signing_alg="none" +testing-farm initiate_login_uri=null +testing-farm default_max_age=null +testing-farm default_acr_values=null +testing-farm client_secret_expires_at=0 + +kerneltest-client client_id=null +kerneltest-client client_secret="notsecret" +kerneltest-client client_name="Kernel Tests Client" +kerneltest-client redirect_uris=["http://localhost:13747/", "http://localhost:12345/", "http://localhost:23456/"] +kerneltest-client application_type="native" +kerneltest-client client_uri="https://kerneltest.fedoraproject.org/" +kerneltest-client contacts=["admin@fedoraproject.org"] +kerneltest-client logo_uri=null +kerneltest-client policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +kerneltest-client tos_uri=null +kerneltest-client jwks_uri=null +kerneltest-client jwks=null +kerneltest-client sector_identifier_uri=null +kerneltest-client subject_type="public" +kerneltest-client response_types="code" +kerneltest-client grant_types="authorization_code" +kerneltest-client request_uris=[] +kerneltest-client require_auth_time=null +kerneltest-client token_endpoint_auth_method="client_secret_post" +kerneltest-client id_token_signed_response_alg="RS256" +kerneltest-client request_object_signing_alg="none" +kerneltest-client initiate_login_uri=null +kerneltest-client default_max_age=null +kerneltest-client default_acr_values=null +kerneltest-client client_secret_expires_at=0 + +konflux-ci client_name="Konflux CI" +konflux-ci client_secret="{{ konfluxci_stg_oidc_secret }}" +konflux-ci redirect_uris=["https://oauth-openshift.apps.kfluxfedorap01.toli.p1.openshiftapps.com/oauth2callback/OpenID"] +konflux-ci client_uri="https://console-openshift-console.apps.kfluxfedorap01.toli.p1.openshiftapps.com" +konflux-ci ipsilon_internal={"type":"static","client_id":"konflux-ci","trusted":true} +konflux-ci contacts=["konflux-infra@redhat.com"] +konflux-ci client_id=null +konflux-ci policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +konflux-ci grant_types="authorization_code" +konflux-ci response_types="code" +konflux-ci application_type="web" +konflux-ci subject_type="public" +konflux-ci logo_uri=null +konflux-ci tos_uri=null +konflux-ci jwks_uri=null +konflux-ci jwks=null +konflux-ci sector_identifier_uri=null +konflux-ci request_uris=[] +konflux-ci require_auth_time=null +konflux-ci token_endpoint_auth_method="client_secret_post" +konflux-ci id_token_signed_response_alg="RS256" +konflux-ci request_object_signing_alg="none" +konflux-ci initiate_login_uri=null +konflux-ci default_max_age=null +konflux-ci default_acr_values=null +konflux-ci client_secret_expires_at=0 + +forgejo client_id=null +forgejo client_secret="{{ forgejo_stg_oidc_secret }}" +forgejo client_name="Forgejo" +forgejo redirect_uris=["https://forgejo.apps.ocp.stg.fedoraproject.org/user/oauth2/FAS/callback"] +forgejo application_type="native" +forgejo client_uri="https://forgejo.apps.ocp.stg.fedoraproject.org/" +forgejo contacts=["admin@fedoraproject.org"] +forgejo logo_uri=null +forgejo policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +forgejo tos_uri=null +forgejo jwks_uri=null +forgejo jwks=null +forgejo sector_identifier_uri=null +forgejo subject_type="public" +forgejo response_types="code" +forgejo grant_types="authorization_code" +forgejo request_uris=[] +forgejo require_auth_time=null +forgejo token_endpoint_auth_method="client_secret_post" +forgejo id_token_signed_response_alg="RS256" +forgejo request_object_signing_alg="none" +forgejo initiate_login_uri=null +forgejo default_max_age=null +forgejo default_acr_values=null +forgejo client_secret_expires_at=0 +forgejo ipsilon_internal={"type":"static","client_id":"forgejo","trusted":true} + +webhook2fedmsg client_name="Webhook to Fedora Messaging" +webhook2fedmsg client_secret="" +webhook2fedmsg redirect_uris=["https://webhook2fedmsg.stg.fedoraproject.org/docs/oauth2-redirect","https://webhook2fedmsg.apps.ocp.stg.fedoraproject.org/docs/oauth2-redirect"] +webhook2fedmsg client_uri="https://webhook2fedmsg.stg.fedoraproject.org/" +webhook2fedmsg ipsilon_internal={"type":"static","client_id":"webhook2fedmsg","trusted":true} +webhook2fedmsg contacts=["admin@fedoraproject.org"] +webhook2fedmsg client_id=null +webhook2fedmsg policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +webhook2fedmsg grant_types="authorization_code" +webhook2fedmsg response_types="code" +webhook2fedmsg application_type="native" +webhook2fedmsg subject_type="public" +webhook2fedmsg logo_uri=null +webhook2fedmsg tos_uri=null +webhook2fedmsg jwks_uri=null +webhook2fedmsg jwks=null +webhook2fedmsg sector_identifier_uri=null +webhook2fedmsg request_uris=[] +webhook2fedmsg require_auth_time=null +webhook2fedmsg token_endpoint_auth_method="none" +webhook2fedmsg id_token_signed_response_alg="RS256" +webhook2fedmsg request_object_signing_alg="none" +webhook2fedmsg initiate_login_uri=null +webhook2fedmsg default_max_age=null +webhook2fedmsg default_acr_values=null +webhook2fedmsg client_secret_expires_at=0 + +fedoracomstg-wpengine-com client_id=null +fedoracomstg-wpengine-com client_secret="{{ flask_oidc_dev_stg_oidc_client_secret }}" +fedoracomstg-wpengine-com client_name="Fedora Community Blog (staging)" +fedoracomstg-wpengine-com redirect_uris=["https://fedoracomstg.wpengine.com/wp-admin/admin-ajax.php?action=openid-connect-authorize"] +fedoracomstg-wpengine-com application_type="web" +fedoracomstg-wpengine-com client_uri="https://fedoracomstg.wpengine.com/" +fedoracomstg-wpengine-com contacts=["misc@fedoraproject.org"] +fedoracomstg-wpengine-com logo_uri=null +fedoracomstg-wpengine-com policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +fedoracomstg-wpengine-com tos_uri=null +fedoracomstg-wpengine-com jwks_uri=null +fedoracomstg-wpengine-com jwks=null +fedoracomstg-wpengine-com sector_identifier_uri=null +fedoracomstg-wpengine-com subject_type="public" +fedoracomstg-wpengine-com response_types="code" +fedoracomstg-wpengine-com grant_types="authorization_code" +fedoracomstg-wpengine-com request_uris=[] +fedoracomstg-wpengine-com require_auth_time=null +fedoracomstg-wpengine-com token_endpoint_auth_method="client_secret_post" +fedoracomstg-wpengine-com id_token_signed_response_alg="RS256" +fedoracomstg-wpengine-com request_object_signing_alg="none" +fedoracomstg-wpengine-com initiate_login_uri=null +fedoracomstg-wpengine-com default_max_age=null +fedoracomstg-wpengine-com default_acr_values=null +fedoracomstg-wpengine-com client_secret_expires_at=0 +fedoracomstg-wpengine-com ipsilon_internal={"type":"static","client_id":"fedoracomstg-wpengine-com","trusted":true} + +copr client_name="Copr (staging)" +copr client_secret="{{ copr_oidc_stg_client_secret }}" +copr redirect_uris=["https://copr.stg.fedoraproject.org/oidc_auth/"] +copr client_uri="https://copr.stg.fedoraproject.org/" +copr ipsilon_internal={"type":"static","client_id":"copr","trusted":true} +copr contacts=["admin@fedoraproject.org"] +copr client_id=null +copr policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +copr grant_types="authorization_code" +copr response_types="code" +copr application_type="web" +copr subject_type="public" +copr logo_uri=null +copr tos_uri=null +copr jwks_uri=null +copr jwks=null +copr sector_identifier_uri=null +copr request_uris=[] +copr require_auth_time=null +copr token_endpoint_auth_method="client_secret_post" +copr id_token_signed_response_alg="RS256" +copr request_object_signing_alg="none" +copr initiate_login_uri=null +copr default_max_age=null +copr default_acr_values=null +copr client_secret_expires_at=0 + +fedoramagstg-wpengine-com client_id=null +fedoramagstg-wpengine-com client_secret="{{ fedoramag_stg_oidc_secret }}" +fedoramagstg-wpengine-com client_name="Fedora Magazine (staging)" +fedoramagstg-wpengine-com redirect_uris=["https://fedoramagstg.wpengine.com/wp-admin/admin-ajax.php?action=openid-connect-authorize"] +fedoramagstg-wpengine-com application_type="web" +fedoramagstg-wpengine-com client_uri="https://fedoramagstg.wpengine.com/" +fedoramagstg-wpengine-com contacts=["misc@fedoraproject.org"] +fedoramagstg-wpengine-com logo_uri=null +fedoramagstg-wpengine-com policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +fedoramagstg-wpengine-com tos_uri=null +fedoramagstg-wpengine-com jwks_uri=null +fedoramagstg-wpengine-com jwks=null +fedoramagstg-wpengine-com sector_identifier_uri=null +fedoramagstg-wpengine-com subject_type="public" +fedoramagstg-wpengine-com response_types="code" +fedoramagstg-wpengine-com grant_types="authorization_code" +fedoramagstg-wpengine-com request_uris=[] +fedoramagstg-wpengine-com require_auth_time=null +fedoramagstg-wpengine-com token_endpoint_auth_method="client_secret_post" +fedoramagstg-wpengine-com id_token_signed_response_alg="RS256" +fedoramagstg-wpengine-com request_object_signing_alg="none" +fedoramagstg-wpengine-com initiate_login_uri=null +fedoramagstg-wpengine-com default_max_age=null +fedoramagstg-wpengine-com default_acr_values=null +fedoramagstg-wpengine-com client_secret_expires_at=0 +fedoramagstg-wpengine-com ipsilon_internal={"type":"static","client_id":"fedoramagstg-wpengine-com","trusted":true} + +distgit client_id="" +distgit client_secret="{{ distgit_oidc_client_secret_stg }}" +distgit client_name="Dist-Git (staging)" +distgit redirect_uris=["https://src.stg.fedoraproject.org/oidc_callback", "https://src.stg.fedoraproject.org/authorize"] +distgit application_type="web" +distgit client_uri="https://src.stg.fedoraproject.org/" +distgit contacts=["admin@fedoraproject.org"] +distgit logo_uri=null +distgit policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +distgit tos_uri=null +distgit jwks_uri=null +distgit jwks=null +distgit sector_identifier_uri="https://src.stg.fedoraproject.org/" +distgit subject_type="pairwise" +distgit response_types="code" +distgit grant_types="authorization_code" +distgit request_uris=[] +distgit require_auth_time=null +distgit token_endpoint_auth_method="client_secret_post" +distgit id_token_signed_response_alg="RS256" +distgit request_object_signing_alg="none" +distgit initiate_login_uri=null +distgit default_max_age=null +distgit default_acr_values=null +distgit client_secret_expires_at=0 +distgit ipsilon_internal={"type":"static","client_id":"distgit","trusted":true} + +anitya_stg client_id="" +anitya_stg client_secret="{{ anitya_stg_fedora_client_secret }}" +anitya_stg client_name="Release Monitoring (staging)" +anitya_stg redirect_uris=["https://stg.release-monitoring.org/auth/fedora"] +anitya_stg application_type="web" +anitya_stg client_uri="https://stg.release-monitoring.org/" +anitya_stg contacts=["admin@fedoraproject.org"] +anitya_stg logo_uri=null +anitya_stg policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +anitya_stg tos_uri=null +anitya_stg jwks_uri=null +anitya_stg jwks=null +anitya_stg sector_identifier_uri="https://stg.release-monitoring.org/" +anitya_stg subject_type="pairwise" +anitya_stg response_types="code" +anitya_stg grant_types="authorization_code" +anitya_stg request_uris=[] +anitya_stg require_auth_time=null +anitya_stg token_endpoint_auth_method="client_secret_post" +anitya_stg id_token_signed_response_alg="RS256" +anitya_stg request_object_signing_alg="none" +anitya_stg initiate_login_uri=null +anitya_stg default_max_age=null +anitya_stg default_acr_values=null +anitya_stg client_secret_expires_at=0 +anitya_stg ipsilon_internal={"type":"static","client_id":"anitya_stg","trusted":true} + +openqa client_id="" +openqa client_secret="{{ openqa_stg_oidc_secret }}" +openqa client_name="OpenQA (staging)" +openqa redirect_uris=["https://openqa.stg.fedoraproject.org/login"] +openqa application_type="web" +openqa client_uri="https://openqa.stg.fedoraproject.org" +openqa contacts=["qa-tools-sig@lists.fedoraproject.org"] +openqa logo_uri=null +openqa policy_uri="https://fedoraproject.org/wiki/Legal:PrivacyPolicy" +openqa tos_uri=null +openqa jwks_uri=null +openqa jwks=null +openqa sector_identifier_uri="https://openqa.stg.fedoraproject.org" +openqa subject_type="pairwise" +openqa response_types="code" +openqa grant_types="authorization_code" +openqa request_uris=[] +openqa require_auth_time=null +openqa token_endpoint_auth_method="client_secret_post" +openqa id_token_signed_response_alg="RS256" +openqa request_object_signing_alg="none" +openqa initiate_login_uri=null +openqa default_max_age=null +openqa default_acr_values=null +openqa client_secret_expires_at=0 +openqa ipsilon_internal={"type":"static","client_id":"openqa","trusted":true}