feat: refractor CIE auth stack configuration for improved environment variable management and docker compatibility

provider/provider/settingslocal.py

@@ -3,23 +3,32 @@ import os
 
 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 
-SECRET_KEY = 'visione-cie-provider-local-dev'
-DEBUG = True
+def env_bool(name, default=False):
+    value = os.getenv(name)
+    if value is None:
+        return default
+    return value.lower() in {"1", "true", "yes", "on"}
+
+
+SECRET_KEY = os.getenv('DJANGO_SECRET_KEY', 'visione-cie-provider-local-dev')
+DEBUG = env_bool('DJANGO_DEBUG', False)
 ADMIN_PATH = 'admin/'
 APPEND_SLASH = False
 
-OIDCFED_DEFAULT_TRUST_ANCHOR = "http://127.0.0.1:8000"
+OIDCFED_DEFAULT_TRUST_ANCHOR = os.getenv("DJANGO_TRUST_ANCHOR", "http://127.0.0.1:8000")
 OIDCFED_TRUST_ANCHORS = [OIDCFED_DEFAULT_TRUST_ANCHOR]
 OIDCFED_PROVIDER_PROFILE = "cie"
 OIDCFED_PROVIDER_MAX_CONSENT_TIMEFRAME = 3600
 OIDCFED_REQUIRED_TRUST_MARKS = []
 
+provider_issuer = os.getenv("DJANGO_PROVIDER_ISSUER", "http://127.0.0.1:8002/oidc/op")
+
 OIDCFED_IDENTITY_PROVIDERS = {
     "spid": {
-        "http://127.0.0.1:8000/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
+        f"{OIDCFED_DEFAULT_TRUST_ANCHOR}/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
     },
     "cie": {
-        "http://127.0.0.1:8002/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
+        provider_issuer: OIDCFED_DEFAULT_TRUST_ANCHOR,
     },
 }
 
@@ -32,7 +41,7 @@ LOGIN_REDIRECT_URL = "/oidc/op/landing"
 LOGOUT_REDIRECT_URL = "/oidc/op/landing"
 LOGIN_URL = "/oidc/op/landing"
 
-ALLOWED_HOSTS = ['*']
+ALLOWED_HOSTS = [item.strip() for item in os.getenv('DJANGO_ALLOWED_HOSTS', '*').split(',') if item.strip()]
 AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
 
 INSTALLED_APPS = [
@@ -86,7 +95,7 @@ LOGGING = {
     'handlers': {
         'console': {
             'formatter': 'default',
-            'level': 'DEBUG',
+            'level': 'INFO',
             'class': 'logging.StreamHandler',
         },
     },