feat: refractor CIE auth stack configuration for improved environment variable management and docker compatibility

This commit is contained in:
gabdevele
2026-06-17 18:08:25 +02:00 Unverified
parent 69e71ec601
commit e1a009047c
7 changed files with 136 additions and 95 deletions
+22 -10
View File
@@ -3,21 +3,30 @@ import os
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
SECRET_KEY = 'visione-cie-rp-local-dev'
DEBUG = True
def env_bool(name, default=False):
value = os.getenv(name)
if value is None:
return default
return value.lower() in {"1", "true", "yes", "on"}
SECRET_KEY = os.getenv('DJANGO_SECRET_KEY', 'visione-cie-rp-local-dev')
DEBUG = env_bool('DJANGO_DEBUG', False)
ADMIN_PATH = 'admin/'
APPEND_SLASH = False
OIDCFED_DEFAULT_TRUST_ANCHOR = "http://127.0.0.1:8000"
OIDCFED_DEFAULT_TRUST_ANCHOR = os.getenv("DJANGO_TRUST_ANCHOR", "http://127.0.0.1:8000")
OIDCFED_TRUST_ANCHORS = [OIDCFED_DEFAULT_TRUST_ANCHOR]
OIDCFED_REQUIRED_TRUST_MARKS = []
provider_issuer = os.getenv("DJANGO_PROVIDER_ISSUER", "http://127.0.0.1:8002/oidc/op")
OIDCFED_IDENTITY_PROVIDERS = {
"spid": {
"http://127.0.0.1:8000/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
f"{OIDCFED_DEFAULT_TRUST_ANCHOR}/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
},
"cie": {
"http://127.0.0.1:8002/oidc/op": OIDCFED_DEFAULT_TRUST_ANCHOR,
provider_issuer: OIDCFED_DEFAULT_TRUST_ANCHOR,
},
}
@@ -30,12 +39,15 @@ LOGIN_REDIRECT_URL = "/visione/complete"
LOGOUT_REDIRECT_URL = "/oidc/rp/landing"
LOGIN_URL = "/oidc/rp/landing"
VISIONE_BACKEND_EXCHANGE_URL = "http://127.0.0.1:5555/api/v1/auth/cie/exchange"
VISIONE_SHARED_SECRET = "change-me-for-local-dev"
VISIONE_DEFAULT_PROVIDER = "http://127.0.0.1:8002/oidc/op"
VISIONE_BACKEND_EXCHANGE_URL = os.getenv(
"DJANGO_RP_BACKEND_EXCHANGE_URL",
"http://127.0.0.1:5555/api/v1/auth/cie/exchange"
)
VISIONE_SHARED_SECRET = os.getenv("DJANGO_RP_SHARED_SECRET", "change-me-for-local-dev")
VISIONE_DEFAULT_PROVIDER = os.getenv("DJANGO_RP_DEFAULT_PROVIDER", provider_issuer)
VISIONE_DEFAULT_PROFILE = "cie"
ALLOWED_HOSTS = ['*']
ALLOWED_HOSTS = [item.strip() for item in os.getenv('DJANGO_ALLOWED_HOSTS', '*').split(',') if item.strip()]
AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
INSTALLED_APPS = [
@@ -89,7 +101,7 @@ LOGGING = {
'handlers': {
'console': {
'formatter': 'default',
'level': 'DEBUG',
'level': 'INFO',
'class': 'logging.StreamHandler',
},
},