Skip to content

Commit c973ef2

Browse files
committed
Update CyVerse Keycloak settings for SSO
1 parent 086d391 commit c973ef2

1 file changed

Lines changed: 15 additions & 9 deletions

File tree

themes/MUG/invenio.cfg

Lines changed: 15 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -384,22 +384,28 @@ _keycloak_helper = KeycloakSettingsHelper(
384384
legacy_url_path=False
385385
)
386386

387-
_cyverse_keycloak_helper = KeycloakSettingsHelper(
388-
title="CyVerse",
389-
description="CyVerse",
390-
base_url="https://keycloak.cyverse.at",
391-
realm="CyVerse",
392-
app_key="CYVERSE_KEYCLOAK_APP_CREDENTIALS",
393-
legacy_url_path=False,
394-
)
395-
396387
OAUTHCLIENT_KEYCLOAK_REALM_URL = _keycloak_helper.realm_url
397388
OAUTHCLIENT_KEYCLOAK_USER_INFO_URL = _keycloak_helper.user_info_url
398389
OAUTHCLIENT_KEYCLOAK_VERIFY_EXP = True # whether to verify the expiration date of tokens
399390
OAUTHCLIENT_KEYCLOAK_VERIFY_AUD = True # whether to verify the audience tag for tokens
400391
OAUTHCLIENT_KEYCLOAK_AUD = "inveniordm" # probably the same as the client ID
401392
OAUTHCLIENT_KEYCLOAK_USER_INFO_FROM_ENDPOINT = True
402393

394+
_cyverse_keycloak_helper = KeycloakSettingsHelper(
395+
title="Cyverse SSO",
396+
description="Cyverse SSO",
397+
base_url="https://keycloak.cyverse.at",
398+
realm="CyVerse",
399+
app_key="CYVERSE_KEYCLOAK_APP_CREDENTIALS",
400+
)
401+
OAUTHCLIENT_CYVERSE_KEYCLOAK_REALM_URL = _cyverse_keycloak_helper.realm_url
402+
OAUTHCLIENT_CYVERSE_KEYCLOAK_USER_INFO_URL = _cyverse_keycloak_helper.user_info_url
403+
OAUTHCLIENT_CYVERSE_KEYCLOAK_VERIFY_EXP = True
404+
OAUTHCLIENT_CYVERSE_KEYCLOAK_VERIFY_AUD = True
405+
OAUTHCLIENT_CYVERSE_KEYCLOAK_AUD = "inveniordm"
406+
OAUTHCLIENT_CYVERSE_KEYCLOAK_USER_INFO_FROM_ENDPOINT = True
407+
408+
403409
OAUTHCLIENT_REMOTE_APPS = {
404410
"keycloak": _keycloak_helper.remote_app,
405411
# Enable when needed (see docs: multiple keycloak authentication providers):

0 commit comments

Comments
 (0)