diff --git a/roles/copr/frontend/templates/copr.conf b/roles/copr/frontend/templates/copr.conf index 6cd56b5fbd..db9aa1b19e 100644 --- a/roles/copr/frontend/templates/copr.conf +++ b/roles/copr/frontend/templates/copr.conf @@ -265,3 +265,19 @@ USAGE_TREEMAP_TEAMS = { } PULP_CONTENT_URL = "{{ pulp_content_url }}" + +# OIDC config + +OIDC_LOGIN = True +OIDC_CLIENT = "copr" +OIDC_PROVIDER_NAME = "OIDC" # used for the login button +OIDC_SCOPES = "openid profile email https://id.fedoraproject.org/scope/groups https://id.fedoraproject.org/scope/agreements" +OIDC_TOKEN_AUTH_METHOD = "client_secret_post" +OIDC_USERNAME_CLAIM = "preferred_username" +OIDC_METADATA = "https://id.fedoraproject.org/openidc/.well-known/openid-configuration" + +{% if env == 'production' %} +OIDC_SECRET = "{{ copr_oidc_prod_client_secret }}" +{% else %} +OIDC_SECRET = "{{ copr_oidc_stg_client_secret }}" +{% endif %}