Fix oidc config

Author: JBWatenbergScality

salt/metalk8s/addons/ui/config/metalk8s-shell-ui-config.yaml.j2

@@ -23,7 +23,7 @@ spec:
     providerUrl: "/oidc"
     redirectUrl: "{{ salt.metalk8s_network.get_control_plane_ingress_endpoint() }}/{{ metalk8s_ui_config.spec.basePath.lstrip('/') }}"
     clientId: "metalk8s-ui"
-    responseType: "id_token"
+    responseType: "code"
     scopes: "openid profile email groups offline_access audience:server:client_id:oidc-auth-client"
   userGroupsMapping:
   {%- for user in dex.spec.config.staticPasswords | map(attribute='email') %}

salt/metalk8s/addons/ui/config/metalk8s-ui-config.yaml.j2

@@ -23,7 +23,7 @@ spec:
     providerUrl: "/oidc"
     redirectUrl: "{{ salt.metalk8s_network.get_control_plane_ingress_endpoint() }}/"
     clientId: "metalk8s-ui"
-    responseType: "id_token"
+    responseType: "code"
     scopes: "openid profile email groups offline_access audience:server:client_id:oidc-auth-client"
 {%- endif %}
 

shell-ui/src/navbar/index.mdx

@@ -5,7 +5,7 @@ import * as WebComponent from './index.js';
 <solutions-navbar 
     oidc-provider-url="https://10.200.4.157:8443/oidc" 
     client-id="metalk8s-ui"
-    response-type="id_token"
+    response-type="code"
     redirect-url="http://localhost:8082"
     scopes="openid profile email groups offline_access audience:server:client_id:oidc-auth-client"
     options={

tests/conftest.py

@@ -431,7 +431,7 @@ def dex_login(username, password, should_fail, control_plane_ingress_ep):
         auth_page = session.get(
             control_plane_ingress_ep + "/oidc/auth/local?",
             params={
-                "response_type": "id_token",
+                "response_type": "code",
                 "client_id": "metalk8s-ui",
                 "scope": "openid audience:server:client_id:oidc-auth-client",
                 "redirect_uri": control_plane_ingress_ep + "/",

ui/cypress/fixtures/runtime-app-configuration

@@ -24,7 +24,7 @@
             "providerUrl": "/oidc",
             "redirectUrl": "/",
             "clientId": "metalk8s-ui",
-            "responseType": "id_token",
+            "responseType": "code",
             "scopes": "openid profile email groups offline_access audience:server:client_id:oidc-auth-client"
         }
     }

ui/cypress/fixtures/shell-config.json

@@ -4,7 +4,7 @@
     "providerUrl": "/oidc",
     "redirectUrl": "/",
     "clientId": "metalk8s-ui",
-    "responseType": "id_token",
+    "responseType": "code",
     "scopes": "openid profile email groups offline_access audience:server:client_id:oidc-auth-client"
   },
   "options": {

ui/public/.well-known/runtime-app-configuration

@@ -26,7 +26,7 @@
       "providerUrl": "/oidc",
       "redirectUrl": "http://localhost:8084/",
       "clientId": "metalk8s-ui",
-      "responseType": "id_token",
+      "responseType": "code",
       "scopes": "openid profile email groups offline_access audience:server:client_id:oidc-auth-client",
       "providerLogout": true
     }