From 332f39aba943ed575699aabf4e869b9c0040940b Mon Sep 17 00:00:00 2001 From: Thomas Krampl Date: Wed, 21 May 2025 14:07:12 +0200 Subject: [PATCH] wonderwall-forward-auth: add zitadel project id as aud Co-authored-by: Trong Huu Nguyen --- charts/wonderwall-forward-auth/Feature.yaml | 4 ++++ charts/wonderwall-forward-auth/templates/secret.yaml | 1 + charts/wonderwall-forward-auth/values.yaml | 1 + 3 files changed, 6 insertions(+) diff --git a/charts/wonderwall-forward-auth/Feature.yaml b/charts/wonderwall-forward-auth/Feature.yaml index 1787af8..1435b7a 100644 --- a/charts/wonderwall-forward-auth/Feature.yaml +++ b/charts/wonderwall-forward-auth/Feature.yaml @@ -7,6 +7,10 @@ values: computed: template: | {{ .Env.wonderwall_forward_auth_zitadel_client_id | quote }} + openid.extraAudience: + computed: + template: | + {{ .Env.wonderwall_forward_auth_zitadel_project_id | quote }} openid.clientSecret: required: true computed: diff --git a/charts/wonderwall-forward-auth/templates/secret.yaml b/charts/wonderwall-forward-auth/templates/secret.yaml index 9004bc1..7891263 100644 --- a/charts/wonderwall-forward-auth/templates/secret.yaml +++ b/charts/wonderwall-forward-auth/templates/secret.yaml @@ -17,6 +17,7 @@ stringData: WONDERWALL_OPENID_PROVIDER: "openid" WONDERWALL_OPENID_CLIENT_ID: "{{ .Values.openid.clientID | required ".Values.openid.clientID is required." }}" WONDERWALL_OPENID_CLIENT_SECRET: "{{ .Values.openid.clientSecret | required ".Values.openid.clientSecret is required." }}" + WONDERWALL_OPENID_AUDIENCES: "{{ .Values.openid.extraAudience }}" WONDERWALL_OPENID_WELL_KNOWN_URL: "{{ .Values.openid.wellKnownURL | required ".Values.openid.wellKnownURL is required." }}" WONDERWALL_ENCRYPTION_KEY: "{{ .Values.session.cookieEncryptionKey | required ".Values.session.cookieEncryptionKey is required." }}" WONDERWALL_REDIS_URI: "redis://{{ .Values.valkey.fullnameOverride }}-primary:6379" diff --git a/charts/wonderwall-forward-auth/values.yaml b/charts/wonderwall-forward-auth/values.yaml index cc0e62d..d37e80a 100644 --- a/charts/wonderwall-forward-auth/values.yaml +++ b/charts/wonderwall-forward-auth/values.yaml @@ -22,6 +22,7 @@ ingressClassName: nais-ingress-fa openid: clientID: clientSecret: + extraAudience: wellKnownURL: https://auth.nais.io/.well-known/openid-configuration session: maxLifetime: 10h