Skip to content

Commit

Permalink
authentication flow changed default name and add readme
Browse files Browse the repository at this point in the history
  • Loading branch information
Martin Jurk committed Mar 3, 2025
1 parent f0bc039 commit fbff86b
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 5 deletions.
17 changes: 13 additions & 4 deletions Readme.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@

# Bridgehead Secret Sync

## Usage
Expand Down Expand Up @@ -35,6 +34,7 @@ services:
```
#### Secret Definitions
`SECRET_DEFINITIONS` should be `\x1E` (Ascii record separator) delimited list of secret definitions.
A secret definition is a `:` separated 3-tuple. The first value is the [secret type](#secret-types) which defines how the secret is generated. The second argument is the secrets name which will be the name written to the secrets cache file. The third value is the data used to generate the secret which depends on the [secret type](#secret-types) used.

Expand Down Expand Up @@ -62,6 +62,13 @@ services:
# Extra service account roles for the private client
- KEYCLOAK_SERVICE_ACCOUNT_ROLES=query-users,query-groups
# Optional authentik parameters
- AUTHENTIK_URL=http://authentik:9000
# Client id of the authentik apps and providers which has to have permissions to create apps and providers
- AUTHENTIK_ID=my_authentik_admin
# The client secret for the client
- AUTHENTIK_SECRET=my_secret
# Optional GitLab parameters
# The base URL for API calls, e.g. "https://gitlab.com/"
- GITLAB_URL=
Expand All @@ -74,12 +81,14 @@ services:
## Secret types

### OIDC

Register an Open ID Connect client at the central half of this component.

Secret type: `OIDC`
Each argument is separated by a semicolon. The arguments are:
Each argument is separated by a semicolon. The arguments are:

- The type of OIDC client which gets created. Either `public` or `private`
- A comma separated list of urls permitted for redirection
- A comma separated list of urls permitted for redirection

Example:
`OIDC:MY_OIDC_CLIENT_SECRET:public;https://foo.com,https://bar.com`
Expand All @@ -92,4 +101,4 @@ Secret type: `GitLabProjectAccessToken`

The third value after the final `:` is unused.

Example: `GitLabProjectAccessToken:GIT_CONFIG_REPO_TOKEN:`
Example: `GitLabProjectAccessToken:GIT_CONFIG_REPO_TOKEN:`
2 changes: 1 addition & 1 deletion central/src/auth/authentik/mod.rs
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ impl FlowPropertymapping {
if let Some(flow) = PROPERTY_MAPPING_CACHE.lock().unwrap().as_ref() {
return Ok(flow.clone());
}
let flow_auth = "authorization_flow";
let flow_auth = "default-authorization-flow";
let flow_invalidation = "default-provider-invalidation-flow";
let property_keys = vec![
"web-origins",
Expand Down

0 comments on commit fbff86b

Please sign in to comment.