tiararodney/bugzilla
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(bugzilla): allow anonymous browsing

Browse source
This commit is contained in:
Tiara Rodney 2026-03-14 20:12:10 +01:00
parent ff7f3e705f
commit cfb9b7c591
No known key found for this signature in database
GPG key ID: 5CD8EC1D46106723
2 changed files with 11 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
ansible/roles/bugzilla/tasks/deploy-bugzilla.yml
View file

@ -126,7 +126,7 @@
name: Deploy OIDC login redirect page name: Deploy OIDC login redirect page
copy: copy:
src: oidc-login.html src: oidc-login.html
dest: "{{ bugzilla_dir }}/oidc-login.html" dest: "{{ install_dir }}/oidc-login.html"
owner: www-data owner: www-data
group: www-data group: www-data
when: oauth_client_id is defined when: oauth_client_id is defined

12
ansible/roles/bugzilla/templates/bugzilla-vhost.conf.j2
View file

@ -25,8 +25,12 @@
OIDCPassClaimsAs environment OIDCPassClaimsAs environment
OIDCSSLValidateServer Off OIDCSSLValidateServer Off
OIDCProviderEndSessionEndpoint {{ oauth_issuer_url }}/end-session/ OIDCProviderEndSessionEndpoint {{ oauth_issuer_url }}/end-session/
OIDCDefaultURL https://{{ domain }}/
<Location /> # Login trigger — Alias to file outside DocumentRoot so the
# Directory's OIDCUnAuthAction pass does not apply here.
Alias /oidc-login {{ install_dir }}/oidc-login.html
<Location /oidc-login>
AuthType openid-connect AuthType openid-connect
Require valid-user Require valid-user
</Location> </Location>
@ -45,7 +49,11 @@
Options +ExecCGI +FollowSymLinks Options +ExecCGI +FollowSymLinks
DirectoryIndex index.cgi index.html DirectoryIndex index.cgi index.html
AllowOverride All AllowOverride All
{% if oauth_client_id is not defined %} {% if oauth_client_id is defined %}
AuthType openid-connect
OIDCUnAuthAction pass
Require valid-user
{% else %}
Require all granted Require all granted
{% endif %} {% endif %}
</Directory> </Directory>