Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

odcs - Require a valid oidc user for POST PATCH PUT and DELETE.

Browse source
This commit is contained in:
Ralph Bean 2017-09-26 17:27:31 +00:00
parent b182ecdbda
commit fa246a7a86
1 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/odcs/frontend/templates/etc/httpd/conf.d/odcs.conf.j2
View file

@ -36,8 +36,16 @@ OIDCOAuthIntrospectionEndpointParams token_type_hint=Bearer
{{ 'Require ip ' ~ odcs_allowed_hosts|join(' ') }} {{ 'Require ip ' ~ odcs_allowed_hosts|join(' ') }}
{% endif %} {% endif %}
</RequireAny> </RequireAny>
{% endif %}
Require all granted Require all granted
{% else %}
AuthType openid-connect
<Limit GET HEAD OPTIONS>
Require all granted
</Limit>
<Limit POST PATCH PUT DELETE>
Require valid-user
</Limit>
{% endif %}
</RequireAll> </RequireAll>
</Directory> </Directory>