env.d/development/common.dist

# Django
DJANGO_ALLOWED_HOSTS=*
DJANGO_SECRET_KEY=ThisIsAnExampleKeyForDevPurposeOnly
DJANGO_SETTINGS_MODULE=people.settings
DJANGO_SUPERUSER_PASSWORD=admin

# Python
PYTHONPATH=/app

# People settings

# Mail
DJANGO_EMAIL_HOST="mailcatcher"
DJANGO_EMAIL_PORT=1025

# Backend url
PEOPLE_BASE_URL="http://localhost:8072"

# OIDC
OIDC_OP_JWKS_ENDPOINT=http://nginx:8083/realms/people/protocol/openid-connect/certs
OIDC_OP_AUTHORIZATION_ENDPOINT=http://localhost:8083/realms/people/protocol/openid-connect/auth
OIDC_OP_TOKEN_ENDPOINT=http://nginx:8083/realms/people/protocol/openid-connect/token
OIDC_OP_USER_ENDPOINT=http://nginx:8083/realms/people/protocol/openid-connect/userinfo

OIDC_RP_CLIENT_ID=people
OIDC_RP_CLIENT_SECRET=ThisIsAnExampleKeyForDevPurposeOnly
OIDC_RP_SIGN_ALGO=RS256
OIDC_RP_SCOPES="openid email"

LOGIN_REDIRECT_URL=http://localhost:3000
LOGIN_REDIRECT_URL_FAILURE=http://localhost:3000
LOGOUT_REDIRECT_URL=http://localhost:3000

OIDC_REDIRECT_ALLOWED_HOSTS=["http://localhost:8083", "http://localhost:3000"]
OIDC_AUTH_REQUEST_EXTRA_PARAMS={"acr_values": "eidas1"}
✨(project) first proof of concept based of Joanie Used https://github.com/openfun/joanie as boilerplate, ran a few transformations with ChapGPT and adapted models and endpoints to fit to my current vision of the project. 2024-01-03 10:09:31 +01:00			`# Django`
			`DJANGO_ALLOWED_HOSTS=*`
			`DJANGO_SECRET_KEY=ThisIsAnExampleKeyForDevPurposeOnly`
			`DJANGO_SETTINGS_MODULE=people.settings`
			`DJANGO_SUPERUSER_PASSWORD=admin`

			`# Python`
			`PYTHONPATH=/app`

			`# People settings`

			`# Mail`
			`DJANGO_EMAIL_HOST="mailcatcher"`
			`DJANGO_EMAIL_PORT=1025`

			`# Backend url`
			`PEOPLE_BASE_URL="http://localhost:8072"`
✨(keycloak) add keycloak as auth server Keycloak is a open source identity and access management for modern applications and services. - add keycloak server in docker-compose - add keycloak in frontend 2024-01-09 15:53:46 +01:00
✨(backend) support Authorization code flow Integrate 'mozilla-django-oidc' dependency, to support Authorization Code flow, which is required by Agent Connect. Thus, we provide a secure back channel OIDC flow, and return to the client only a session cookie. Done: - Replace JWT authentication by Session based authentication in DRF - Update Django settings to make OIDC configurations easily editable - Add 'mozilla-django-oidc' routes to our router - Implement a custom Django Authentication class to adapt 'mozilla-django-oidc' to our needs 'mozilla-django-oidc' routes added are: - /authenticate - /callback (the redirect_uri called back by the Idp) - /logout 2024-02-15 11:00:30 +01:00			`# OIDC`
			`OIDC_OP_JWKS_ENDPOINT=http://nginx:8083/realms/people/protocol/openid-connect/certs`
			`OIDC_OP_AUTHORIZATION_ENDPOINT=http://localhost:8083/realms/people/protocol/openid-connect/auth`
			`OIDC_OP_TOKEN_ENDPOINT=http://nginx:8083/realms/people/protocol/openid-connect/token`
			`OIDC_OP_USER_ENDPOINT=http://nginx:8083/realms/people/protocol/openid-connect/userinfo`

			`OIDC_RP_CLIENT_ID=people`
			`OIDC_RP_CLIENT_SECRET=ThisIsAnExampleKeyForDevPurposeOnly`
			`OIDC_RP_SIGN_ALGO=RS256`
			`OIDC_RP_SCOPES="openid email"`

			`LOGIN_REDIRECT_URL=http://localhost:3000`
			`LOGIN_REDIRECT_URL_FAILURE=http://localhost:3000`
			`LOGOUT_REDIRECT_URL=http://localhost:3000`

			`OIDC_REDIRECT_ALLOWED_HOSTS=["http://localhost:8083", "http://localhost:3000"]`
			`OIDC_AUTH_REQUEST_EXTRA_PARAMS={"acr_values": "eidas1"}`