Refs #35473 - Configure Apache for API extlogin

ofedoren · ekohl · commit 60d07bdb82c3 · 2022-10-31T11:39:39.000+01:00
diff --git a/templates/auth_gssapi.conf.erb b/templates/auth_gssapi.conf.erb
@@ -1,5 +1,5 @@
 
-<Location /users/extlogin>
+<LocationMatch ^(/api(/v2)?)?/users/extlogin/?$>
   SSLRequireSSL
   AuthType GSSAPI
   AuthName "GSSAPI Single Sign On Login"
@@ -11,5 +11,4 @@
   ErrorDocument 401 '<html><meta http-equiv="refresh" content="0; URL=/users/login"><body>Kerberos authentication did not pass.</body></html>'
   # The following is needed as a workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1020087
   ErrorDocument 500 '<html><meta http-equiv="refresh" content="0; URL=/users/login"><body>Kerberos authentication did not pass.</body></html>'
-</Location>
-
+</LocationMatch>
diff --git a/templates/lookup_identity.conf.erb b/templates/lookup_identity.conf.erb
@@ -1,5 +1,5 @@
 
-<LocationMatch ^/users/(ext)?login/?$>
+<LocationMatch ^(/api(/v2)?)?/users/(ext)?login/?$>
   LookupUserAttr email REMOTE_USER_EMAIL
   LookupUserAttr firstname REMOTE_USER_FIRSTNAME
   LookupUserAttr lastname REMOTE_USER_LASTNAME
@@ -13,4 +13,3 @@
   RequestHeader set REMOTE_USER_LASTNAME %{REMOTE_USER_LASTNAME}e
   RequestHeader set REMOTE_USER_GROUPS %{REMOTE_USER_GROUPS}e
 </LocationMatch>
-
diff --git a/templates/settings-external-auth.yaml.erb b/templates/settings-external-auth.yaml.erb
@@ -1,3 +1,3 @@
 :authorize_login_delegation: true
+:authorize_login_delegation_api: true
 :authorize_login_delegation_auth_source_user_autocreate: External
-
