Skip to content

Commit

Permalink
adding example config files for new micro services
Browse files Browse the repository at this point in the history
  • Loading branch information
rhoerbe committed Oct 24, 2019
1 parent db3f692 commit 4d823a6
Show file tree
Hide file tree
Showing 4 changed files with 57 additions and 0 deletions.
11 changes: 11 additions & 0 deletions example/plugins/microservices/custom_routing.example
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
module: satosa.micro_services.custom_routing.DecideIfRequesterIsAllowed
name: RequesterDecider
config:
rules:
target_entity_id1:
allow: ["requester1", "requester2"]
target_entity_id2:
deny: ["requester3"]
target_entity_id3:
allow: ["requester1"]
deny: ["*"]
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
module: satosa.micro_services.redirect_url.RedirectUrlRequest
name: RedirectUrlRequest
config:
db_encryption_key: "WQpuhOELqGAs/ct2mujCqw"
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
module: satosa.micro_services.redirect_url.RedirectUrlResponse
name: RedirectUrlResponse
config:
db_encryption_key: "WQpuhOELqGAs/ct2mujCqw" # must be same in redirect_url_request.yaml
redirect_attr_name: WkisRedirect
redir_entityid: http://wkis.qss.wko.at/adfs/services/trust
36 changes: 36 additions & 0 deletions example/plugins/microservices/simpleconsent.yaml.example
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
# this file contains secret keys. Protect file or insert values from environment

module: satosa.micro_services.simpleconsent.SimpleConsent
name: SimpleConsent
config:
consent_cookie_name: SATOSA_CONSENTID
consent_attr_not_displayed:
- addr_country
- authenticationClass
- possibleroles
- registrationClassOrg
- registrationClassUser
- wkis_roleextendeddescription
- wkis_roletypeid
consent_attrname_display:
uid: UserID
displayname: Anzeigename
givenname: Vorname
gln: "GLN der Firma"
mail: E-Mailadresse
name: Vor+Familienname
surname: Familienname
wkis_roledescription: "WKO Mitglied"
consent_service_api_auth:
userid: admin
password: adminadmin
id_hash_alg: md5 # md5 is shorter than sha-224, but may be missing in (rare) FIPS-compliant C-Python
# shard secret: configure same ASCII-value in proxy and consent app
PROXY_HMAC_KEY: "your random key (-> `openssh rand -base64 30`)"
request_consent_url: https://consent.example.org/request_consent
self_entityid: satosa.vnet/idp_proxy.xml
# consent display page: translate SP entityIDs to human readable names
# (work around, as metadata is not available in the micro service)
sp_entityid_names:
https://sp1.test.wpv.portalverbund.at/sp.xml: "Test SP1"
verify_consent_url: https://consent.example.org/has_consent

0 comments on commit 4d823a6

Please sign in to comment.