feat: make oidc configurations profile compatible

Also rename the environment variables for OIDC configuration.

Refs: PS-166

haravajarjestelma/settings.py

@@ -43,11 +43,11 @@
     SENTRY_ENVIRONMENT=(str, ""),
     CORS_ORIGIN_WHITELIST=(list, []),
     CORS_ORIGIN_ALLOW_ALL=(bool, False),
-    TOKEN_AUTH_ACCEPTED_AUDIENCE=(str, "https://api.hel.fi/auth/puistotalkoot"),
-    TOKEN_AUTH_ACCEPTED_SCOPE_PREFIX=(str, ""),
-    TOKEN_AUTH_AUTHSERVER_URL=(str, ""),
-    TOKEN_AUTH_FIELD_FOR_CONSENTS=(str, ""),
-    TOKEN_AUTH_REQUIRE_SCOPE_PREFIX=(bool, False),
+    OIDC_API_AUTHORIZATION_FIELD=(list, []),
+    OIDC_API_SCOPE_PREFIX=(list, []),
+    OIDC_AUDIENCE=(list, []),
+    OIDC_ISSUER=(list, []),
+    OIDC_REQUIRE_SCOPE_FOR_AUTHENTICATION=(bool, False),
     EVENT_MINIMUM_DAYS_BEFORE_START=(int, 7),
     EVENT_MAXIMUM_COUNT_PER_CONTRACT_ZONE=(int, 3),
     EVENT_REMINDER_DAYS_IN_ADVANCE=(int, 2),
@@ -206,11 +206,13 @@
 CORS_ORIGIN_ALLOW_ALL = env("CORS_ORIGIN_ALLOW_ALL")
 
 OIDC_API_TOKEN_AUTH = {
-    "AUDIENCE": env.str("TOKEN_AUTH_ACCEPTED_AUDIENCE"),
-    "API_SCOPE_PREFIX": env.str("TOKEN_AUTH_ACCEPTED_SCOPE_PREFIX"),
-    "ISSUER": env.str("TOKEN_AUTH_AUTHSERVER_URL"),
-    "API_AUTHORIZATION_FIELD": env.str("TOKEN_AUTH_FIELD_FOR_CONSENTS"),
-    "REQUIRE_API_SCOPE_FOR_AUTHENTICATION": env.bool("TOKEN_AUTH_REQUIRE_SCOPE_PREFIX"),
+    "AUDIENCE": env("OIDC_AUDIENCE"),
+    "API_SCOPE_PREFIX": env("OIDC_API_SCOPE_PREFIX"),
+    "ISSUER": env("OIDC_ISSUER"),
+    "API_AUTHORIZATION_FIELD": env("OIDC_API_AUTHORIZATION_FIELD"),
+    "REQUIRE_API_SCOPE_FOR_AUTHENTICATION": env(
+        "OIDC_REQUIRE_SCOPE_FOR_AUTHENTICATION"
+    ),
 }
 
 HELUSERS_BACK_CHANNEL_LOGOUT_ENABLED = True