Yorick van Pelt
555a3dbb95
Switch from email-based OIDC matching to the stable `sub` claim. Existing users are migrated by email on first login, new users are auto-enrolled from OIDC claims, and admin status is synced from the IdP's groups claim. Also expose oidc_sub on the admin edit-user page. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
44 lines
1.5 KiB
Plaintext
44 lines
1.5 KiB
Plaintext
<?php
|
|
/*****************************************************************************
|
|
* config.php
|
|
* Contains general settings for the project.
|
|
*
|
|
* Kabuki CMS (C) 2013-2015, Aaron van Geffen
|
|
*****************************************************************************/
|
|
|
|
const DEBUG = true;
|
|
const CACHE_ENABLED = true;
|
|
const CACHE_KEY_PREFIX = 'hashru_';
|
|
|
|
// Basedir and base URL of the project.
|
|
const BASEDIR = __DIR__;
|
|
const BASEURL = 'https://pics.hashru.nl'; // no trailing /
|
|
|
|
// Reply-To e-mail header address
|
|
const REPLY_TO_ADDRESS = 'no-reply@my.domain.tld';
|
|
|
|
// Assets dir and url, where assets are plentiful. (In wwwroot!)
|
|
const ASSETSDIR = BASEDIR . '/public/assets';
|
|
const ASSETSURL = BASEURL . '/assets';
|
|
|
|
// Thumbs dir and url, where thumbnails for assets reside.
|
|
const THUMBSDIR = BASEDIR . '/public/thumbs';
|
|
const THUMBSURL = BASEURL . '/thumbs';
|
|
|
|
// Database server, username, password, name
|
|
const DB_SERVER = '127.0.0.1';
|
|
const DB_USER = 'hashru';
|
|
const DB_PASS = '';
|
|
const DB_NAME = 'hashru_pics';
|
|
const DB_LOG_QUERIES = false;
|
|
|
|
const SITE_TITLE = 'HashRU Pics';
|
|
const SITE_SLOGAN = 'Nijmeegs Nerdclubje';
|
|
|
|
// OIDC authentication (e.g. Kanidm). OIDC is enabled when OIDC_PROVIDER_URL is non-empty.
|
|
const OIDC_PROVIDER_URL = ''; // e.g. 'https://kanidm.example.com/oauth2/openid/pics'
|
|
const OIDC_CLIENT_ID = '';
|
|
const OIDC_CLIENT_SECRET = '';
|
|
const OIDC_PROVIDER_NAME = ''; // e.g. 'Kanidm' — used as button label
|
|
const OIDC_ADMIN_GROUP = ''; // OIDC group claim value that grants admin, e.g. 'pics_admins'
|