feat: add ability to change default scopes

defenseunicorns · Nov 13, 2024 · dfb5267 · dfb5267
1 parent fdd0a7c
commit dfb5267
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/chart/templates/uds-package.yaml b/chart/templates/uds-package.yaml
@@ -18,14 +18,26 @@ spec:
         - "https://confluence.{{ .Values.domain }}/plugins/servlet/oidc/callback"
 
       defaultClientScopes:
+      {{- if .Values.sso.defaultClientScopes }}
+        {{- range .Values.sso.defaultClientScopes }}
+          - "{{ . }}"
+        {{- end }}
+      {{- else }}
         - "mapper-saml-email-email"
         - "mapper-saml-firstname-first_name"
         - "mapper-saml-lastname-last_name"
         - "mapper-saml-grouplist-groups"
         - "mapper-saml-username-name"
+      {{- end }}
     {{- else if eq .Values.sso.protocol "openid_connect"  }}
       clientId: uds-package-confluence-openid-connect
       protocol: openid-connect
+      defaultClientScopes:
+      {{- if .Values.sso.defaultClientScopes }}
+        {{- range .Values.sso.defaultClientScopes }}
+          - "{{ . }}"
+        {{- end }}
+      {{- end }}
 
       redirectUris:
         - "https://confluence.{{ .Values.domain }}/plugins/servlet/oidc/callback"

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -20,6 +20,8 @@ sso:
   enabled: true
   # Options: "saml", "openid_connect"
   protocol: "saml"
+  # This will replace the current list of default scopes. Add all mappers that are necessary here
+  defaultClientScopes: {}
 
 # custom:
 #    # Notice no `remoteGenerated` field here on custom internal rule