Compare commits

..

2 Commits

Author SHA1 Message Date
4a67f38f11 meta: bump collection to 0.7.0 2024-10-02 20:58:52 +02:00
23301a0a86 feat(oidc_user_backend): add ansible role 2024-09-29 22:18:55 +02:00
7 changed files with 8 additions and 12 deletions

View File

@ -1,6 +1,6 @@
namespace: finallycoffee namespace: finallycoffee
name: nextcloud name: nextcloud
version: 0.6.1 version: 0.7.0
readme: README.md readme: README.md
authors: authors:
- transcaffeine <transcaffeine@finally.coffee> - transcaffeine <transcaffeine@finally.coffee>

View File

@ -4,9 +4,6 @@ Configure OIDC user backends in nextcloud using this ansible role.
This role can be run multiple times with different arguments in order to This role can be run multiple times with different arguments in order to
configure multiple oidc-based user backends. configure multiple oidc-based user backends.
> [!WARNING]
> This role is not production ready or finished
## Configuration ## Configuration
Set `oidc_user_backend_provider_identifier` to a unique identifier. Set `oidc_user_backend_provider_identifier` to a unique identifier.

View File

@ -9,7 +9,7 @@ oidc_user_backend_config_provider_scopes:
- email - email
- profile - profile
oidc_user_backend_config_provider_settings_unique_id: true oidc_user_backend_config_provider_settings_unique_uid: true
oidc_user_backend_config_provider_settings_check_bearer: true oidc_user_backend_config_provider_settings_check_bearer: true
oidc_user_backend_config_provider_settings_send_id_token_hint: true oidc_user_backend_config_provider_settings_send_id_token_hint: true
oidc_user_backend_config_provider_settings_bearer_provisioning: false oidc_user_backend_config_provider_settings_bearer_provisioning: false
@ -38,5 +38,3 @@ oidc_user_backend_config_provider_settings_mapping_headline: ~
oidc_user_backend_config_provider_settings_mapping_biography: ~ oidc_user_backend_config_provider_settings_mapping_biography: ~
oidc_user_backend_config_provider_settings_mapping_phone: ~ oidc_user_backend_config_provider_settings_mapping_phone: ~
oidc_user_backend_config_provider_settings_mapping_gender: ~ oidc_user_backend_config_provider_settings_mapping_gender: ~

View File

@ -38,3 +38,4 @@
oidc_user_backend_occ_command_result: >-2 oidc_user_backend_occ_command_result: >-2
{{ oidc_user_backend_occ_result_map[oidc_user_backend_deployment_method] {{ oidc_user_backend_occ_result_map[oidc_user_backend_deployment_method]
| default(false, true) }} | default(false, true) }}
when: oidc_user_backend_occ_command_result_var | default(false, true)

View File

@ -45,8 +45,8 @@
ansible.builtin.include_tasks: ansible.builtin.include_tasks:
file: execute-occ.yml file: execute-occ.yml
vars: vars:
occ_command: >- oidc_user_backend_occ_command_to_exec: >-
{{ oidc_user_backend_occ_user_oidc_provider_set_command }} {{ oidc_user_backend_occ_user_oidc_provider_set_command }}
occ_become_user: "{{ oidc_user_backend_deployment_become_user_info.uid }}" oidc_user_backend_occ_user_to_become: "{{ oidc_user_backend_deployment_become_user_info.uid }}"
occ_command_result_var: "oidc_user_backend_occ_user_oidc_provider_update_info" oidc_user_backend_occ_command_result_var: ~
when: oidc_user_backend_backend_force_update | default(false, true) when: oidc_user_backend_backend_force_update | default(false, true)

View File

@ -9,7 +9,7 @@ oidc_user_backend_occ_user_oidc_config_provider_dict:
scope: "{{ oidc_user_backend_config_provider_scopes | default([], true) | join(' ') }}" scope: "{{ oidc_user_backend_config_provider_scopes | default([], true) | join(' ') }}"
settings: settings:
uniqueUid: >-2 uniqueUid: >-2
{{ oidc_user_backend_config_provider_settings_unique_id | bool }} {{ oidc_user_backend_config_provider_settings_unique_uid | bool }}
providerBasedId: >-2 providerBasedId: >-2
{{ oidc_user_backend_config_provider_settings_provider_based_id | bool }} {{ oidc_user_backend_config_provider_settings_provider_based_id | bool }}
checkBearer: >-2 checkBearer: >-2

View File

@ -7,7 +7,7 @@ oidc_user_backend_occ_user_oidc_provider_options_dict:
endsessionendpointuri: "{{ oidc_user_backend_config_provider_end_session_endpoint }}" endsessionendpointuri: "{{ oidc_user_backend_config_provider_end_session_endpoint }}"
scope: "'{{ oidc_user_backend_config_provider_scopes | default([], true) | join(' ') }}'" scope: "'{{ oidc_user_backend_config_provider_scopes | default([], true) | join(' ') }}'"
"unique-uid": >-2 "unique-uid": >-2
{{ oidc_user_backend_config_provider_settings_unique_id | bool | ternary(1, 0) }} {{ oidc_user_backend_config_provider_settings_unique_uid | bool | ternary(1, 0) }}
"check-bearer": >-2 "check-bearer": >-2
{{ oidc_user_backend_config_provider_settings_check_bearer | bool | ternary(1, 0) }} {{ oidc_user_backend_config_provider_settings_check_bearer | bool | ternary(1, 0) }}
"send-id-token-hint": >-2 "send-id-token-hint": >-2