InfraScience
/
ansible-role-inception
23
0
Fork 0
Code Issues Pull Requests Releases Activity

Define a preauth logout URL.

This commit is contained in:
Andrea Dell'Amico 2021-11-04 12:23:34 +01:00
parent 6c199348c1
commit df3bf17534
Signed by: andrea.dellamico
GPG Key ID: 147ABE6CEB9E20FF
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
defaults/main.yml
View File

@ -33,6 +33,7 @@ keycloak_auth_server: https://localhost
inception_project_server_auth_mode: 'database'
inception_project_server_preauth_header: 'remote_user'
inception_project_server_preauth_default_roles: ''
inception_project_server_preauth_logout_url: ""
inception_project_server_preauth_users_roles: []
# - { username: 'user', roles: 'ROLE_PROJECT_CREATOR,ROLE_ADMIN' }
# DB
@ -61,8 +62,6 @@ inception_project_settings:
- 'backup.keep.number={{ inception_project_backup_keep_number }}'
- 'backup.keep.time={{ inception_project_backup_keep_time }}'
- 'auth.mode={{ inception_project_server_auth_mode }}'
- 'auth.preauth.header.principal={{ inception_project_server_preauth_header }}'
- 'auth.preauth.newuser.roles={{ inception_project_server_preauth_default_roles }}'
- 'warnings.embeddedDatabase=true'
- 'versioning.enabled={{ inception_project_versioning_enabled }}'
- 'websocket.enabled={{ inception_project_websockets_enabled }}'

5
templates/settings.properties.j2
View File

@ -2,9 +2,14 @@ warnings.unsupportedBrowser=false
{% for setting in inception_project_settings %}
{{ setting }}
{% endfor %}
{% if inception_project_server_auth_mode == "preauth" %}
auth.preauth.header.principal={{ inception_project_server_preauth_header }}
auth.preauth.logoutUrl={{ inception_project_server_preauth_logout_url }}
auth.preauth.newuser.roles={{ inception_project_server_preauth_default_roles }}
{% for user_role in inception_project_server_preauth_users_roles %}
auth.user.{{ user_role.username }}.roles={{ user_role.roles }}
{% endfor %}
{% endif %}
{% if inception_project_disable_crsf %}
wicket.core.csrf.enabled=false
wicket.core.csrf.no-origin-action=allow