zydronium/internetee-registry
1
0
Fork 0
mirror of https://github.com/internetee/registry.git synced 2025-07-24 11:38:30 +02:00
Code Issues Projects Releases Packages Wiki Activity

Set OmniAuth on failure config

Browse source
This commit is contained in:
Alex Sherman 2020-09-25 13:20:27 +05:00
parent d256aa357e
commit 227c2f100d
9 changed files with 64 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

20
config/initializers/omniauth.rb
View file

@ -1,20 +1,20 @@
OpenIDConnect.logger = Rails.logger
OpenIDConnect.debug!
OpenIDConnect.http_config do |config|
config.proxy = AuctionCenter::Application.config.customization.dig(:tara, :proxy)
end
OmniAuth.config.on_failure = Proc.new { |env|
OmniAuth::FailureEndpoint.new(env).redirect_to_failure
}
OmniAuth.config.logger = Rails.logger
# Block GET requests to avoid exposing self to CVE-2015-9284
OmniAuth.config.allowed_request_methods = [:post]
signing_keys = "{\"kty\":\"RSA\",\"kid\":\"de6cc4\",\"n\":\"jWwAjT_03ypme9ZWeSe7c-jY26NO50Wo5I1LBnPW2JLc0dPMj8v7y4ehiRpClYNTaSWcLd4DJmlKXDXXudEUWwXa7TtjBFJfzlZ-1u0tDvJ-H9zv9MzO7UhUFytztUEMTrtStdhGbzkzdEZZCgFYeo2i33eXxzIR1nGvI05d9Y-e_LHnNE2ZKTa89BC7ZiCXq5nfAaCgQna_knh4kFAX-KgiPRAtsiDHcAWKcBY3qUVcb-5XAX8p668MlGLukzsh5tFkQCbJVyNtmlbIHdbGvVHPb8C0H3oLYciv1Fjy_tS1lO7OT_cb3GVp6Ql-CG0uED_8pkpVtfsGRviub4_ElQ\",\"e\":\"AQAB\"}"
issuer = 'https://tara-test.ria.ee'
host = 'tara-test.ria.ee'
identifier = 'registripidaja_test'
secret = 'MdNnRBmc1JrDJUe_9h4qy52d'
redirect_uri = 'https://st-rar.infra.tld.ee/registrar/open_id/callback'
signing_keys = ENV['tara_keys']
issuer = ENV['tara_issuer']
host = ENV['tara_host']
identifier = ENV['tara_identifier']
secret = ENV['tara_secret']
redirect_uri = ENV['tara_redirect_uri']
Rails.application.config.middleware.use OmniAuth::Builder do
provider "tara", {
@ -36,7 +36,7 @@ Rails.application.config.middleware.use OmniAuth::Builder do
userinfo_endpoint: nil, # Not implemented
jwks_uri: '/oidc/jwks',
# Auction
# Registry
identifier: identifier,
secret: secret,
redirect_uri: redirect_uri,