diff options
| author |  Aaron Schif <aaronschif@gmail.com>
| 2023-06-12 03:22:46 -0500 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2023-06-12 10:22:46 +0200 |
| commit | 58b254f9cb923d5d0dfe53df4bca8a0f00bbcf0b (patch) | |
| tree | ccd368d81044a38d1b2713e67f3faff6ada865b9 /Docker/FreshRSS.Apache.conf | |
| parent | 15d143989b8ed1f73f1c574b03e03d4f4c820b11 (diff) | |
Add OpenID Connect (#5351)
* Add OIDC
* Update documentation.
* Update apache conf adding IfModule
* Use IfDefine for OIDC in apache conf
* Fix non-oidc support
* Fix typing
* Use IfDefine to enable OIDC
* Add OIDC support to all dockerfiles
* Re add apache Require option
* Fixes and documentation
* A few more fixes
* A bit more doc
* Change type of environment variable
* Update readme
* Correct apache config for OIDC support.
* Fix README formatting
* Update oidc control path
* Fix oidc endpoint being cached
* A bit more review
* Simplify ExpiresActive
* Add session refresh and improve caching
* Allow more different setups
* A bit more documentation
* A bit more readme
---------
Co-authored-by: Aaron Schif <aschif@netdevgroup.com>
Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
Co-authored-by: maTh <math-home@web.de>
Diffstat (limited to 'Docker/FreshRSS.Apache.conf')
| -rw-r--r-- | Docker/FreshRSS.Apache.conf | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/Docker/FreshRSS.Apache.conf b/Docker/FreshRSS.Apache.conf index b943f9fa7..e5576ac8f 100644 --- a/Docker/FreshRSS.Apache.conf +++ b/Docker/FreshRSS.Apache.conf @@ -10,6 +10,24 @@ AllowEncodedSlashes On ServerTokens OS TraceEnable Off +<IfDefine OIDC_ENABLED> + <IfModule !auth_openidc_module> + Error "The auth_openidc_module is not available. Install it or unset environment variable OIDC_ENABLED." + </IfModule> + + OIDCProviderMetadataURL ${OIDC_PROVIDER_METADATA_URL} + OIDCClientID ${OIDC_CLIENT_ID} + OIDCClientSecret ${OIDC_CLIENT_SECRET} + + OIDCRedirectURI /i/oidc/ + OIDCCryptoPassphrase ${OIDC_CLIENT_CRYPTO_KEY} + + OIDCRemoteUserClaim preferred_username + OIDCScope "openid" + + OIDCRefreshAccessTokenBeforeExpiry 30 +</IfDefine> + <Directory /> AllowOverride None Options FollowSymLinks @@ -28,6 +46,12 @@ TraceEnable Off </Directory> <Directory /var/www/FreshRSS/p/i> + ExpiresActive Off + + <IfDefine OIDC_ENABLED> + AuthType openid-connect + Require valid-user + </IfDefine> IncludeOptional /var/www/FreshRSS/p/i/.htaccess </Directory> |