Kevin Veen-Birkenbach 4ae3cee36c web-svc-logout: merge logout domains into CSP connect-src and refactor task flow ...

• Add tasks/01_core.yml to set applications[application_id].server.csp.whitelist['connect-src'] = LOGOUT_CONNECT_SRC_NEW.

• Switch tasks/main.yml to include 01_core.yml (run-once guard preserved).

• Update templates/env.j2 to emit LOGOUT_DOMAINS as a comma-separated list.

• Rework vars/main.yml: compute LOGOUT_DOMAINS, derive LOGOUT_ORIGINS with WEB_PROTOCOL, read connect-src via the get_app_conf filter, and merge/dedupe (unique).

Rationale: ensure CSP allows cross-domain logout requests for all configured services.

Conversation: https://chatgpt.com/share/68b5b07d-b208-800f-b6b2-f26934607c8a

2025-09-01 16:41:33 +02:00

..

docker-compose.yml.j2

Refactor docker-compose build logic and pull policy

2025-08-28 11:25:35 +02:00

env.j2

web-svc-logout: merge logout domains into CSP connect-src and refactor task flow

2025-09-01 16:41:33 +02:00

logout-proxy.conf.j2

Replaced web_protocol by WEB_PROTOCOL

2025-08-07 12:31:20 +02:00