Beaker openidc scope declaration.

roles/ipsilon/files/oidc_scopes/beaker.py

@@ -0,0 +1,14 @@
+from __future__ import absolute_import
+
+from ipsilon.providers.openidc.plugins.common import OpenidCExtensionBase
+
+
+class OpenidCExtension(OpenidCExtensionBase):
+    name = 'beaker'
+    display_name = 'Beaker Jobs'
+    scopes = {
+        'https://beaker-project.org/oidc/scope': {
+            'display_name': 'Full CRUD permissions to your beaker account',
+            'claims': [],
+        },
+    }

roles/ipsilon/tasks/main.yml

@@ -33,6 +33,7 @@
   with_items:
   - account-scopes
   - mbs
+  - beaker
   notify:
   - reload apache
   tags:

roles/ipsilon/templates/configuration.conf

@@ -25,7 +25,7 @@ global enabled=persona,openid,saml2,openidc
 {% if env == "production" %}
 openidc enabled extensions=fedora-account,mbs
 {% else %}
-openidc enabled extensions=fedora-account,mbs
+openidc enabled extensions=fedora-account,mbs,beaker
 {% endif %}
 
 {% if env == 'staging' %}