From b50b5963f1117dc9c06692063a9e9bbf30a0c641 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Franti=C5=A1ek=20Dvo=C5=99=C3=A1k?= <valtri@civ.zcu.cz>
Date: Wed, 10 Apr 2024 16:11:09 +0000
Subject: [PATCH] Make authentication work - fixes in OIDC due to tokens
refresh
---
cesnet-central/deployments/central.yaml | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/cesnet-central/deployments/central.yaml b/cesnet-central/deployments/central.yaml
index 6c2e893..3160323 100644
--- a/cesnet-central/deployments/central.yaml
+++ b/cesnet-central/deployments/central.yaml
@@ -94,8 +94,10 @@ hub:
client_id: "{{ secret['client_id'] }}"
client_secret: "{{ secret['client_secret'] }}"
oauth_callback_url: "https://eosc.zcu.cz/hub/oauth_callback"
- scope: ["openid", "profile", "email", "entitlements"]
+ scope: ["openid", "profile", "email", "offline_access", "entitlements"]
username_key: "sub"
+ extra_authorize_params:
+ prompt: consent
JupyterHub:
admin_access: true
authenticate_prometheus: false
--
GitLab