added j2 variable for pep credentials
This commit is contained in:
parent
a291962444
commit
2ec97193aa
|
@ -36,18 +36,22 @@ server {
|
||||||
js_content pep.enforce;
|
js_content pep.enforce;
|
||||||
}
|
}
|
||||||
|
|
||||||
# location /gcube_user_info {
|
location /jwt_verify_request {
|
||||||
# internal;
|
internal;
|
||||||
# gunzip on;
|
gunzip on;
|
||||||
# proxy_method GET;
|
proxy_method POST;
|
||||||
# proxy_http_version 1.1;
|
proxy_http_version 1.1;
|
||||||
# proxy_set_header gcube-token "$auth_token";
|
proxy_set_header Authorization {{ keycloak_auth_credentials_prod }};
|
||||||
# proxy_pass https://api.d4science.org/rest/2/people/profile;
|
proxy_set_header Content-Type "application/x-www-form-urlencoded";
|
||||||
#
|
proxy_pass https://{{ keycloak_auth_server }}/auth/realms/d4science/protocol/openid-connect/token/introspect;
|
||||||
# proxy_cache social_cache;
|
proxy_cache token_responses; # Enable caching
|
||||||
# proxy_cache_key $auth_token;
|
proxy_cache_key $source_auth; # Cache for each source authentication
|
||||||
# }
|
proxy_cache_lock on; # Duplicate tokens must wait
|
||||||
|
proxy_cache_valid 200 10s; # How long to use each response
|
||||||
|
proxy_ignore_headers Cache-Control Expires Set-Cookie;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
location /_backend {
|
location /_backend {
|
||||||
internal;
|
internal;
|
||||||
proxy_read_timeout 300;
|
proxy_read_timeout 300;
|
||||||
|
|
Loading…
Reference in New Issue