feat: configurable defaultClientScopes (#164)

defenseunicorns · Nov 13, 2024 · f1670f9 · f1670f9
1 parent aae3f61
commit f1670f9
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/chart/templates/uds-package.yaml b/chart/templates/uds-package.yaml
@@ -14,6 +14,11 @@ spec:
       redirectUris:
         - "https://{{ .Values.subdomain }}.{{ .Values.domain }}/*"
       defaultClientScopes:
+      {{- if .Values.sso.defaultClientScopes }}
+        {{- range .Values.sso.defaultClientScopes }}
+          - "{{ . }}"
+        {{- end }}
+      {{- else }}
         - "openid"
         {{ if eq .Values.sso.protocol "gitlab" }}
         - "mapper-oidc-username-username"
@@ -24,6 +29,7 @@ spec:
         - "profile"
         - "email"
         {{ end }}
+      {{- end }}
 
       secretName: {{ .Values.sso.secretName }}
       secretTemplate:

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -36,6 +36,9 @@ sso:
   protocol: "gitlab"
   secretName: mattermost-sso
 
+  # This will replace the current list of default client scopes.
+  defaultClientScopes: {}
+
   # These should typically be disabled if SSO is enabled
   enable_sign_up_with_email: false
   enable_sign_in_with_email: false