mirror of
https://github.com/zulip/zulip.git
synced 2025-10-24 16:43:57 +00:00
auth: Fix up AzureAD Oauth2 docs and config.
This commit brings AzureAD config in line with other backends: - SOCIAL_AUTH_AZUREAD_OAUTH2_SECRET gets fetched in computed_settings.py instead of default_settings, consistent with github/gitlab/etc. - SOCIAL_AUTH_AZUREAD_OAUTH2_KEY gets fetched in default_settings via get_secret(..., development_only=True) like other social backends, to allow easier set up in dev environment, in the dev-secrets.conf file. - The secret gets renamed from azure_oauth2_secret to social_auth_azuread_oauth2_secret to have a consistent naming scheme with other social backends and with the SOCIAL_AUTH_AZUREAD_OAUTH2_KEY name. This is backwards-incompatible. The instructions for setting it up are updated to fit how this is currently done in AzureAD.
This commit is contained in:
committed by
Tim Abbott
parent
3826fc8af9
commit
16829bd84b
@@ -1120,6 +1120,8 @@ else:
|
||||
|
||||
SOCIAL_AUTH_GITHUB_SECRET = get_secret("social_auth_github_secret")
|
||||
SOCIAL_AUTH_GITLAB_SECRET = get_secret("social_auth_gitlab_secret")
|
||||
SOCIAL_AUTH_AZUREAD_OAUTH2_SECRET = get_secret("social_auth_azuread_oauth2_secret")
|
||||
|
||||
SOCIAL_AUTH_GITHUB_SCOPE = ["user:email"]
|
||||
if SOCIAL_AUTH_GITHUB_ORG_NAME or SOCIAL_AUTH_GITHUB_TEAM_ID:
|
||||
SOCIAL_AUTH_GITHUB_SCOPE.append("read:org")
|
||||
|
||||
Reference in New Issue
Block a user