Skip to content

Commit 0421367

Browse files
mrvanesmrvanes
committed
Use SBS api namespace
1 parent 60773a2 commit 0421367

4 files changed

Lines changed: 152 additions & 2 deletions

File tree

‎core/engine/appconf.conf‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,8 @@ SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
1414
Header always set X-Content-Type-Options "nosniff"
1515

1616
SetEnv HTTPS on
17+
#SetEnv ENGINEBLOCK_ENV dev
18+
#SetEnv SYMFONY_ENV dev
1719

1820
RewriteEngine On
1921
# We support only GET/POST

‎core/engine/docker-compose.override.yml‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,8 @@ services:
55
volumes:
66
- ${ENGINE_CODE_PATH}:/var/www/html
77
- ./engine/appconf.conf:/etc/apache2/sites-enabled/appconf.conf
8+
- ./engine/parameters.yml:/var/www/html/app/config/parameters.yml
89
environment:
910
- APP_ENV=${APP_ENV:-dev}
10-
- SYMFONY_ENV=${APP_ENV:-dev}
11-
- APP_DEBUG=true
11+
# - SYMFONY_ENV=${APP_ENV:-dev}
12+
- APP_DEBUG=1

‎core/engine/parameters.yml‎

Lines changed: 143 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,143 @@
1+
# This file is auto-generated during the composer install
2+
parameters:
3+
secret: secret
4+
domain: dev.openconext.local
5+
hostname: engine.dev.openconext.local
6+
trusted_proxies:
7+
- 192.168.1.1
8+
- 10.0.0.1
9+
enabled_languages:
10+
- nl
11+
- en
12+
attribute_definition_file_path: '%kernel.project_dir%/application/configs/attributes.json'
13+
encryption_keys:
14+
default:
15+
publicFile: /config/engine/engineblock.crt
16+
privateFile: /config/engine/engineblock.pem
17+
forbidden_signature_methods: { }
18+
allowed_acs_location_schemes:
19+
- http
20+
- https
21+
metadata_add_requested_attributes: all
22+
php_settings:
23+
memory_limit: 256M
24+
display_errors: '1'
25+
error_reporting: '6135'
26+
date.timezone: Europe/Amsterdam
27+
sendmail_from: 'OpenConext EngineBlock <openconext-engineblock@openconext.org>'
28+
api.users.metadataPush.username: manage
29+
api.users.metadataPush.password: secret
30+
api.users.profile.username: profile
31+
api.users.profile.password: secret
32+
api.users.deprovision.username: lifecycle
33+
api.users.deprovision.password: secret
34+
pdp.host: 'https://pdp.dev.openconext.local'
35+
pdp.username: pdp_admin
36+
pdp.password: secret
37+
pdp.client_id: EngineBlock
38+
pdp.policy_decision_point_path: /pdp/api/decide/policy
39+
attribute_aggregation.base_url: 'https://aa.dev.openconext.local/internal/attribute/aggregation'
40+
attribute_aggregation.username: eb
41+
attribute_aggregation.password: secret
42+
logger.channel: engineblock
43+
logger.fingers_crossed.passthru_level: NOTICE
44+
logger.fingers_crossed.action_level: ERROR
45+
logger.syslog.ident: EBLOG
46+
logger.line_format: '[%%datetime%%] %%channel%%.%%level_name%%: %%message%% %%extra%% %%context%%'
47+
database.host: mariadb
48+
database.port: '3306'
49+
database.user: ebrw
50+
database.password: secret
51+
database.dbname: eb
52+
database.test.host: localhost
53+
database.test.port: '3306'
54+
database.test.user: eb_testrw
55+
database.test.password: secret
56+
database.test.dbname: eb_test
57+
engineblock.metadata_push_memory_limit: 256M
58+
minimum_execution_time_on_invalid_received_response: 5000
59+
addgueststatus_guestqualifier: 'urn:collab:org:dev.openconext.local'
60+
cookie.path: /
61+
cookie.secure: true
62+
cookie.locale.domain: .dev.openconext.local
63+
cookie.locale.expiry: 5184000
64+
cookie.locale.http_only: false
65+
cookie.locale.secure: true
66+
view_default_title: OpenConext
67+
view_default_header: OpenConext
68+
view_default_logo: /images/logo.png
69+
view_default_logo_width: 96
70+
view_default_logo_height: 96
71+
env_name: ''
72+
env_ribbon_color: ''
73+
ui_return_to_sp_link: false
74+
email_request_access_address: help@example.org
75+
monitor_database_health_check_query: 'SELECT uuid FROM user LIMIT 1;'
76+
wayf.cutoff_point_for_showing_unfiltered_idps: 50
77+
wayf.remember_choice: false
78+
wayf.display_default_idp_banner_on_wayf: true
79+
wayf.default_idp_entity_id: 'https://default-idp.dev.openconext.local'
80+
global.site_notice.show: false
81+
global.site_notice.allowed.tags: '<a><u><i><br><wbr><strong><em><blink><marquee><p><ul><ol><dl><li><dd><dt><div><span><blockquote><hr><h2></h2><h3><h4><h5><h6>'
82+
time_frame_for_authentication_loop_in_seconds: 60
83+
maximum_authentication_procedures_allowed: 5
84+
consent_store_values: true
85+
email_idp_debugging:
86+
from:
87+
name: 'OpenConext EngineBlock'
88+
address: no-reply@example.org
89+
to:
90+
address: coin-logs-dev@list.surfnet.nl
91+
name: 'OpenConext Admin'
92+
subject: 'IdP debug info from %%1$s'
93+
mailer_transport: smtp
94+
mailer_host: localhost
95+
mailer_port: '25'
96+
mailer_user: ''
97+
mailer_password: ''
98+
feature_eb_encrypted_assertions: true
99+
feature_eb_encrypted_assertions_require_outer_signature: true
100+
feature_api_metadata_push: true
101+
feature_api_consent_listing: true
102+
feature_api_consent_remove: true
103+
feature_api_metadata_api: true
104+
feature_api_deprovision: true
105+
feature_run_all_manipulations_prior_to_consent: false
106+
feature_block_user_on_violation: false
107+
feature_enable_consent: true
108+
feature_stepup_sfo_override_engine_entityid: false
109+
feature_enable_idp_initiated_flow: true
110+
feature_enable_sram_interrupt: true
111+
profile_base_url: 'https://profile.dev.openconext.local'
112+
stepup.authn_context_class_ref_blacklist_regex: '/http:\/\/vm\.openconext\.org\/assurance\/loa[1-3]/'
113+
stepup.loa.mapping:
114+
10:
115+
engineblock: 'http://dev.openconext.local/assurance/loa1'
116+
gateway: 'http://dev.openconext.local/assurance/loa1'
117+
15:
118+
engineblock: 'http://dev.openconext.local/assurance/loa1_5'
119+
gateway: 'http://dev.openconext.local/assurance/loa1_5'
120+
20:
121+
engineblock: 'http://dev.openconext.local/assurance/loa2'
122+
gateway: 'http://dev.openconext.local/assurance/loa2'
123+
30:
124+
engineblock: 'http://dev.openconext.local/assurance/loa3'
125+
gateway: 'http://dev.openconext.local/assurance/loa3'
126+
stepup.loa.loa1: 'http://dev.openconext.local/assurance/loa1'
127+
stepup.gateway.sfo.entity_id: 'https://gateway.dev.openconext.local/second-factor-only/metadata'
128+
stepup.gateway.sfo.sso_location: 'https://gateway.dev.openconext.local/second-factor-only/single-sign-on'
129+
stepup.gateway.sfo.key_file: /config/engine/engineblock.crt
130+
stepup.sfo.override_engine_entityid: ''
131+
theme.name: skeune
132+
feature_enable_sso_notification: false
133+
sso_notification_encryption_algorithm: AES-256-CBC
134+
sso_notification_encryption_key: '<xxx>'
135+
sso_notification_encryption_key_salt: '<xxx>'
136+
feature_enable_sso_session_cookie: false
137+
sso_session_cookie_max_age: 0
138+
auth.log.attributes: { }
139+
sram.api_token: 'secret'
140+
sram.authz_location: 'http://192.168.0.1:12345/api/users/proxy_authz_eb'
141+
#sram.authz_location: 'http://sbs:8080/api/users/proxy_authz'
142+
sram.interrupt_location: 'http://localhost:12345/api/users/interrupt'
143+
sram.entitlements_location: 'http://192.168.0.1:12345/api/users/attributes'

‎core/start‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
#!/bin/sh
2+
#./start-dev-env.sh engine:../../OpenConext-engineblock
3+
export ENGINE_CODE_PATH=../../OpenConext-engineblock
4+
docker compose --profile oidc --profile sbs -f docker-compose.yml -f ./engine/docker-compose.override.yml -f ./sbs/docker-compose.override.yml up

0 commit comments

Comments
 (0)