summaryrefslogtreecommitdiffstats
path: root/config
diff options
context:
space:
mode:
authorDaniel <git@baby-gnu.org>2021-08-25 16:41:24 +0000
committerGitHub <noreply@github.com>2021-08-25 18:41:24 +0200
commit2ed1c92c6331029ebd2762cc425a3a163dffd113 (patch)
tree82e9c08cf7fab9124a3fa46b350622588cfbd7ab /config
parent366e0b82dbfd51b4502586beb39f65594ddf36a5 (diff)
New env variable: CAS_SECURITY_ASSUME_EMAIL_IS_VERIFIED (#16655)
When using a CAS server, the users only have a temporary email `change@me-foo-cas.com` which can't be changed but by an administrator. We need a new environment variable like for SAML to assume the email from CAS is verified. * config/initializers/omniauth.rb: define CAS option for assuming email are always verified. * .env.nanobox: add new variable as an example.
Diffstat (limited to 'config')
-rw-r--r--config/initializers/omniauth.rb2
1 files changed, 2 insertions, 0 deletions
diff --git a/config/initializers/omniauth.rb b/config/initializers/omniauth.rb
index 9e037f421fc..5039b4c1f03 100644
--- a/config/initializers/omniauth.rb
+++ b/config/initializers/omniauth.rb
@@ -30,6 +30,8 @@ Devise.setup do |config|
cas_options[:location_key] = ENV['CAS_LOCATION_KEY'] || 'location'
cas_options[:image_key] = ENV['CAS_IMAGE_KEY'] || 'image'
cas_options[:phone_key] = ENV['CAS_PHONE_KEY'] || 'phone'
+ cas_options[:security] = {}
+ cas_options[:security][:assume_email_is_verified] = ENV['CAS_SECURITY_ASSUME_EMAIL_IS_VERIFIED'] == 'true'
config.omniauth :cas, cas_options
end