diff --git a/README.md b/README.md index c7e3775..9dcf76d 100644 --- a/README.md +++ b/README.md @@ -216,6 +216,7 @@ For Okta, create a new application integration: OIDC_AUTH_METHOD="client_secret_post" OIDC_REDIRECT_URI="https:///users/login" # (same value set in Okta) OIDC_DISABLE_REQUEST_OBJECT=false + OIDC_SKIP_PROXY=true ``` Valid options for OIDC_AUTH_METHOD are: - client_secret_post: tested diff --git a/core/files/configure_misp.sh b/core/files/configure_misp.sh index ef6da1f..20a2f77 100755 --- a/core/files/configure_misp.sh +++ b/core/files/configure_misp.sh @@ -102,7 +102,8 @@ set_up_oidc() { \"mixedAuth\": ${OIDC_MIXEDAUTH}, \"authentication_method\": \"${OIDC_AUTH_METHOD}\", \"redirect_uri\": \"${OIDC_REDIRECT_URI}\", - \"disable_request_object\": \"${OIDC_DISABLE_REQUEST_OBJECT}\" + \"disable_request_object\": \"${OIDC_DISABLE_REQUEST_OBJECT}\", + \"skipProxy\": ${OIDC_SKIP_PROXY} } }" > /dev/null diff --git a/core/files/entrypoint.sh b/core/files/entrypoint.sh index 29c00c3..ac1757b 100755 --- a/core/files/entrypoint.sh +++ b/core/files/entrypoint.sh @@ -56,6 +56,7 @@ export AUTOGEN_ADMIN_KEY=${AUTOGEN_ADMIN_KEY:-$AUTOCONF_ADMIN_KEY} export OIDC_ENABLE=${OIDC_ENABLE:-false} export OIDC_MIXEDAUTH=${OIDC_MIXEDAUTH:-false} export OIDC_DISABLE_REQUEST_OBJECT=${OIDC_DISABLE_REQUEST_OBJECT:-false} +export OIDC_SKIP_PROXY=${OIDC_SKIP_PROXY:-true} export LDAP_ENABLE=${LDAP_ENABLE:-false} export ENABLE_DB_SETTINGS=${ENABLE_DB_SETTINGS:-false} export ENABLE_BACKGROUND_UPDATES=${ENABLE_BACKGROUND_UPDATES:-false} diff --git a/docker-compose.yml b/docker-compose.yml index 0430d35..f1ad87c 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -168,6 +168,7 @@ services: - "OIDC_SCOPES=${OIDC_SCOPES}" - "OIDC_LOGOUT_URL=${OIDC_LOGOUT_URL}" - "OIDC_DISABLE_REQUEST_OBJECT=${OIDC_DISABLE_REQUEST_OBJECT}" + - "OIDC_SKIP_PROXY=${OIDC_SKIP_PROXY}" # APACHESECUREAUTH authentication settings - "APACHESECUREAUTH_LDAP_OLD_VAR_DETECT=${LDAP_ENABLE}" - "APACHESECUREAUTH_LDAP_ENABLE=${APACHESECUREAUTH_LDAP_ENABLE:-${LDAP_ENABLE}}" diff --git a/template.env b/template.env index ca37c92..e7a754f 100644 --- a/template.env +++ b/template.env @@ -179,6 +179,7 @@ SYNCSERVERS_1_PULL_RULES= # OIDC_SCOPES="[\"profile\", \"email\"]" # OIDC_LOGOUT_URL= # OIDC_DISABLE_REQUEST_OBJECT=false +# OIDC_SKIP_PROXY=true # Enable LDAP (using the ApacheSecureAuth component) authentication, according to https://github.com/MISP/MISP/issues/6189 # NOTE: Once you enable LDAP authentication with the ApacheSecureAuth component,