sp_dashboard user for invite API

OpenConext · Sep 4, 2024 · 2d83985 · 2d83985
1 parent 041cd41
commit 2d83985
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 16 deletions.
diff --git a/environments/template/secrets/skeleton.yml b/environments/template/secrets/skeleton.yml
@@ -20,10 +20,10 @@ engine_api_metadata_push_password: secret
 oidcng_api_metadata_push_password: secret
 oidcng_api_tokens_profile_password: secret
 oidcng_api_tokens_eduid_password: secret
-myconext_api_attribute_manipulation_password: "{noop}secret"
+myconext_api_attribute_manipulation_password: "secret"
 myconext_oidcng_rs_client_secret: secret
-myconext_api_attribute_aggregation_password: "{noop}secret"
-myconext_api_studielink_password: "{noop}secret"
+myconext_api_attribute_aggregation_password: "secret"
+myconext_api_studielink_password: "secret"
 myconext_client_secret: secret
 myconext_rs_client_secret: secret
 myconext_geo2lite_license_key: secret
@@ -136,12 +136,13 @@ myconext_private_key: |
 
 invite_oidc_secret: secretsecret
 invite_rs_secret: secretsecret
-invite_voot_secret: "{noop}secret"
-invite_teams_secret: "{noop}secret"
-invite_attribute_aggregation_secret: "{noop}secret"
+invite_voot_secret: "secret"
+invite_teams_secret: "secret"
+invite_attribute_aggregation_secret: "secret"
 invite_manage_secret: secret
-invite_lifecycle_secret: "{noop}secret"
-invite_profile_secret: "{noop}secret"
+invite_lifecycle_secret: "secret"
+invite_profile_secret: "secret"
+invite_sp_dashboard_secret: "secret"
 invite_private_key_pkcs8: |
   -----BEGIN PRIVATE KEY-----
   MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCfpYYMgKYDICkp

diff --git a/environments/vm/secrets/vm.yml b/environments/vm/secrets/vm.yml
@@ -29,10 +29,10 @@ engine_api_metadata_push_password: secret
 oidcng_api_metadata_push_password: secret
 oidcng_api_tokens_profile_password: secret
 oidcng_api_tokens_eduid_password: secret
-myconext_api_attribute_manipulation_password: "{noop}secret"
+myconext_api_attribute_manipulation_password: "secret"
 myconext_oidcng_rs_client_secret: secret
-myconext_api_attribute_aggregation_password: "{noop}secret"
-myconext_api_studielink_password: "{noop}secret"
+myconext_api_attribute_aggregation_password: "secret"
+myconext_api_studielink_password: "secret"
 myconext_client_secret: secret
 myconext_rs_client_secret: secret
 myconext_geo2lite_license_key: secret
@@ -282,12 +282,13 @@ myconext_private_key: |
 
 invite_oidc_secret: secretsecret
 invite_rs_secret: secretsecret
-invite_voot_secret: "{noop}secret"
-invite_teams_secret: "{noop}secret"
-invite_attribute_aggregation_secret: "{noop}secret"
+invite_voot_secret: "secret"
+invite_teams_secret: "secret"
+invite_attribute_aggregation_secret: "secret"
 invite_manage_secret: secret
-invite_lifecycle_secret: "{noop}secret"
-invite_profile_secret: "{noop}secret"
+invite_lifecycle_secret: "secret"
+invite_profile_secret: "secret"
+invite_sp_dashboard_secret: "secret"
 invite_private_key_pkcs8: |
   -----BEGIN PRIVATE KEY-----
   MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCfpYYMgKYDICkp

diff --git a/roles/invite/templates/serverapplication.yml.j2 b/roles/invite/templates/serverapplication.yml.j2
@@ -140,6 +140,11 @@ external-api-configuration:
       password: "{{ invite.profile_secret }}"
       scopes:
         - profile
+    -
+      username: {{ invite.sp_dashboard_user }}
+      password: "{{ invite.sp_dashboard_secret }}"
+      scopes:
+        - sp_dashboard
 
 voot:
   group_urn_domain: "{{ invite.group_urn_domain }}"