update loomio config #8

Merged
ammaratef45 merged 1 commits from loomio_upgrade into main 2025-08-15 16:20:29 +00:00

View File

@ -1,4 +1,4 @@
TYPE=loomio:4.0.2+v2.25.4
TYPE=loomio:5.1.2+v3.0.0
COMPOSE_FILE="compose.yml"
DOMAIN=loomio.resisttechmonopolies.online
@ -90,4 +90,18 @@ SECRET_DB_PASSWORD_VERSION=v1
# THEME_PRIMARY_COLOR=rgb(255,167,38)
# THEME_ACCENT_COLOR=rgb(0,188,212)
# THEME_TEXT_ON_PRIMARY_COLOR=rgb(255,255,255)
# THEME_TEXT_ON_ACCENT_COLOR=rgb(255,255,255)
# THEME_TEXT_ON_ACCENT_COLOR=rgb(255,255,255)
# env variables needed to enable OAuth2 authentication
COMPOSE_FILE="$COMPOSE_FILE:compose.oauth.yml"
OAUTH_ENABLED=1
OAUTH_AUTH_URL="https://auth.resisttechmonopolies.online/application/o/authorize/"
OAUTH_TOKEN_URL="https://auth.resisttechmonopolies.online/application/o/token/"
OAUTH_PROFILE_URL="https://auth.resisttechmonopolies.online/application/o/userinfo/"
OAUTH_SCOPE="openid email profile"
OAUTH_APP_KEY="xNSKMmqA47TSgr7qKgzISV03reTnEmpqc0DZWmCa"
Review

Is this key not supposed to be a secret? is it just a unique identifier but not an authentication token?

Is this key not supposed to be a secret? is it just a unique identifier but not an authentication token?
Review

That's right the "OAUTH_APP_KEY" maps to the Oauth client ID which is just a unique identifier

That's right the "OAUTH_APP_KEY" maps to the Oauth client ID which is just a unique identifier
OAUTH_ATTR_UID=email
OAUTH_ATTR_NAME=name
OAUTH_ATTR_EMAIL=email
OAUTH_LOGIN_PROVIDER_NAME="loomio SSO"
SECRET_OAUTH_APP_SECRET_VERSION=v2