Skip to content

Commit 645eb34

Browse files
author
Rodrigo Barbieri
committed
Add semicolon claim delimiter config in apache2 plugin
By default the oidc apache2 plugin uses comma, but Keystone expects a semicolon [1,2]. This is necessary when writing multi-valued data (such as OIDC-groups) for Keystone to consume. [1] https://opendev.org/openstack/keystone/src/commit/187bcad52219c2c99b572b3d5463dfa7b2128201/keystone/federation/utils.py#L515 [2] https://docs.openstack.org/keystone/latest/admin/federation/mapping_combinations.html#mappings-examples Closes-bug: #2085727 Change-Id: I179ac68a463866c4efaa7c9259a247bf4dc3b573 (cherry picked from commit 4b38b5e) (cherry picked from commit 8403c82) (cherry picked from commit 86f27a4)
1 parent 6ed22a1 commit 645eb34

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

templates/apache-openidc-location.conf

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
{# -*- mode: apache -*- #}
22
OIDCClaimPrefix "OIDC-"
3+
OIDCClaimDelimiter ";"
34
OIDCResponseType "id_token"
45
OIDCScope "openid email profile"
56

0 commit comments

Comments
 (0)