AtlasOfLivingAustralia / profile-hub

Profiles front end application
http://www.ausflora.org.au/
0 stars 3 forks source link

upgrade ALA security plugin #797

Closed temi closed 11 months ago

temi commented 1 year ago

Upgrade security plugin to version 6.2.0 (alaSecurityLibsVersion). Update ansible scripts to add below properties based on the auth server used.

## CAS
userdetails.api.url = https://auth-test.ala.org.au/userdetails/ 
userdetails.web.url = https://auth-test.ala.org.au/userdetails/
security.oidc.scope=openid profile email ala roles

## Cognito
userdetails.api.url = https://api.test.ala.org.au/userdetails/cognito/
userdetails.web.url = https://aws-auth-test-2023.test.ala.org.au/userdetails/
security.oidc.scope=openid profile email ala/attrs ala/roles
security.oidc.logoutUrl={{ oidc_logout_url }}
security.oidc.alaUseridClaim=username
security.oidc.logoutAction=cognito
security.core.roleAttribute=ala:role
security.jwt.rolesFromAccessToken=true
security.jwt.userIdClaim=username
security.jwt.roleClaims=cognito:groups