Projet

Général

Profil

Télécharger (1,48 ko) Statistiques
| Branche: | Tag: | Révision:

oidc / ckanext / ozwillo_pyoidc / conf.py @ ea32df70

1 c8204b73 Serghei Mihai
PORT = 8666
2
#BASE = "https://lingon.ladok.umu.se:" + str(PORT) + "/"
3
BASE = "http://ckan.dev.entrouvert.org"
4
5
6
# If BASE is https these has to be specified
7
SERVER_CERT = "certs/server.crt"
8
SERVER_KEY = "certs/server.key"
9
CA_BUNDLE = None
10
11
VERIFY_SSL = False
12
13
# information used when registering the client, this may be the same for all OPs
14
15
ME = {
16
    "application_type": "web",
17
    "application_name": "idpproxy",
18
    "contacts": ["ops@example.com"],
19
    "redirect_uris": ["%sauthz_cb" % BASE],
20
    "post_logout_redirect_uris": ["%slogout" % BASE],
21
    "response_types": ["code"]
22
}
23
24
BEHAVIOUR = {
25
    "response_type": "code",
26
    "scope": ["openid", "profile", "email", "address", "phone"],
27
}
28
29
ACR_VALUES = ["SAML"]
30
31
# The keys in this dictionary are the OPs short userfriendly name
32
# not the issuer (iss) name.
33
34
CLIENTS = {
35
    # The ones that support webfinger, OP discovery and client registration
36
    # This is the default, any client that is not listed here is expected to
37
    # support dynamic discovery and registration.
38
    # Supports OP information lookup but not client registration
39
    "ozwillo": {
40
        "srv_discovery_url": "https://accounts.ozwillo-preprod.eu/",
41
        "client_registration": {
42 ea32df70 Serghei MIHAI
            "client_id": None,
43
            "client_secret": None,
44
            "redirect_uris": [],
45 c8204b73 Serghei Mihai
        },
46
        "behaviour": {
47
            "response_type": "code",
48 ea32df70 Serghei MIHAI
            "scope": ["openid", "profile", "email"]
49 c8204b73 Serghei Mihai
        },
50
        "allow": {
51
            "issuer_mismatch": True
52
        }
53
    }
54
}