mirror of
https://github.com/NLnetLabs/krill.git
synced 2026-09-10 03:27:40 +02:00
Ximon EighteenandGitHub
47d23f87a7
Adds a new `prompt_for_login` configuration file setting in the `[auth_openidconnect`]` block (defaults to true for backward compatibility) which can be used to avoid advising the OpenID Connect provider to prompt for login details even if the user has a valid provider login session. Resolves #614.
30 lines
964 B
Plaintext
30 lines
964 B
Plaintext
data_dir = "/tmp/krill"
|
|
service_uri = "https://localhost:3000/"
|
|
log_level = "info"
|
|
log_type = "stderr"
|
|
|
|
auth_type = "openid-connect"
|
|
admin_token = "secret"
|
|
|
|
bgp_risdumps_enabled = false
|
|
|
|
[auth_users]
|
|
'adm@krill' = { attributes={ extra_property="extra_val" } }
|
|
|
|
[auth_openidconnect]
|
|
issuer_url = "https://localhost:1818"
|
|
client_id = "client-id-123"
|
|
client_secret = "some-secret"
|
|
|
|
# custom prompt= behaviour is ignored by the OpenID Connect mock, this is just here to exercise the config parser and
|
|
# for manually observing that the prompt query param in the requests to the mock change as expected.
|
|
prompt_for_login = false
|
|
extra_login_params = { prompt = "none" }
|
|
|
|
[auth_openidconnect.claims]
|
|
# recap_demo = { jmespath = "recap(nonce, '([A-Z]+)')", dest = "boing" }
|
|
# resub_demo = { jmespath = "resub(nonce, '^[A-Z]+.*', '<replaced>')" }
|
|
inc_cas = { jmespath = "inc_cas" }
|
|
exc_cas = { jmespath = "exc_cas" }
|
|
extra_property = { source="config-file", dest="extra" }
|