mirror/infrastructure
1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-09-18 14:11:48 +02:00
Code Issues

Merge branch 'synapse-backchannel-logouts' into 'master'

Browse Source 
matrix: Enable backchannel logouts from keycloak to synapse

See merge request archlinux/infrastructure!653
This commit is contained in:
Evangelos Foutras 2022-11-12 17:33:04 +02:00
commit 20c0df7a7b
No known key found for this signature in database
GPG Key ID: 51E8B148A9999C34
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/matrix/templates/homeserver.yaml.j2
View File

@ -148,6 +148,7 @@ oidc_providers:
client_secret: "{{ vault_matrix_openid_client_secret }}"
scopes: ["openid", "profile", "email", "roles"]
allow_existing_users: false
backchannel_logout_enabled: true
user_mapping_provider:
config:
localpart_template: "{{ '{{ user.preferred_username }}' }}"

3
tf-stage2/keycloak.tf
View File

@ -839,6 +839,9 @@ resource "keycloak_openid_client" "matrix_openid_client" {
valid_redirect_uris = [
"https://matrix.archlinux.org/_synapse/client/oidc/callback"
]
backchannel_logout_url = "https://matrix.archlinux.org/_synapse/client/oidc/backchannel_logout"
backchannel_logout_session_required = true
}
resource "keycloak_openid_user_realm_role_protocol_mapper" "matrix_user_realm_role_mapper" {