Skip to content

OIDCUnAuthAction does not support boolean expression #2566

Open
@mdetrano

Description

@mdetrano

Use Case

mod_auth_openidc supports adding a boolean expression after "OIDCUnAuthAction {action}" to specify conditions that should be met to override the default action. This module seems to prohibit configuring that option for UnAuthAction.

Describe the Solution You Would Like

The system should accept configuration like:

oidc_settings => {
    'UnAuthAction' => 'pass "%{HTTP_ACCEPT} !~ m#text/html#"',
   ...
},

Describe Alternatives You've Considered

I could work around this issue by changing the spec in types/oidcsettings.pp to:
Optional['UnAuthAction'] => Pattern[/^(auth|pass|401|407|410)\s.*/],

Additional Context

OIDC Settings Documentation: here

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions