invite user in myconext

OpenConext · Sep 13, 2024 · 292e2b9 · 292e2b9
1 parent 50971bf
commit 292e2b9
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 0 deletions.
diff --git a/environments/template/secrets/skeleton.yml b/environments/template/secrets/skeleton.yml
@@ -21,6 +21,7 @@ oidcng_api_metadata_push_password: secret
 oidcng_api_tokens_profile_password: secret
 oidcng_api_tokens_eduid_password: secret
 myconext_api_attribute_manipulation_password: "secret"
+myconext_api_invite_password: "secret"
 myconext_oidcng_rs_client_secret: secret
 myconext_api_attribute_aggregation_password: "secret"
 myconext_api_studielink_password: "secret"

diff --git a/environments/vm/secrets/vm.yml b/environments/vm/secrets/vm.yml
@@ -30,6 +30,7 @@ oidcng_api_metadata_push_password: secret
 oidcng_api_tokens_profile_password: secret
 oidcng_api_tokens_eduid_password: secret
 myconext_api_attribute_manipulation_password: "secret"
+myconext_api_invite_password: "secret"
 myconext_oidcng_rs_client_secret: secret
 myconext_api_attribute_aggregation_password: "secret"
 myconext_api_studielink_password: "secret"

diff --git a/roles/invite/templates/serverapplication.yml.j2 b/roles/invite/templates/serverapplication.yml.j2
@@ -83,6 +83,11 @@ cron:
   metadata-resolver-fixed-rate-milliseconds: 86_400_000
   metadata-resolver-url: "https://metadata.{{ base_domain }}/idps-metadata.xml"
 
+myconext:
+  uri: "https://login.{{ myconext_base_domain }}/myconext/api/invite/provision-eduid"
+  username: invite
+  password: "{{ myconext_api_invite_password }}"
+
 oidcng:
   discovery-url: "https://connect.{{ base_domain }}/oidc/.well-known/openid-configuration"
   introspect-url: "https://connect.{{ base_domain }}/oidc/introspect"

diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2
@@ -141,6 +141,11 @@ external-api-configuration:
         - remote-creation
       institutionGUID: ec9d6d75-0d11-e511-80d0-005056956c1a
       schac_home: studielink.nl
+    -
+      username: invite
+      password: "{{ myconext_api_invite_password }}"
+      scopes:
+        - invite
 
 oidc-token-api:
   token-url: https://connect.{{ base_domain }}/tokens