mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-21 13:36:39 +00:00
Kevin Veen-Birkenbach
a996e2190f
- sys-front-inj-logout: depend on web-svc-logout (run-once guarded) and simplify task flow. - web-svc-logout: align feature flags/formatting and extend CSP: - add cdn.jsdelivr.net to connect/script/style and quote values. - Nginx: move CORS config into logout-proxy.conf.j2 with dynamic vars: - Access-Control-Allow-Origin set to canonical logout origin, - Allow-Credentials=true, - Allow-Methods=GET, OPTIONS, - basic headers list (Accept, Authorization), - cache disabled for /logout responses. - Drop obsolete CORS var passing from 01_core.yml; headers now templated at proxy layer. Prepares clean cross-origin logout orchestration from https://logout.veen.world. Refs: ChatGPT discussion – https://chatgpt.com/share/68ebb75f-0170-800f-93c5-e5cb438b8ed4
18 lines
655 B
YAML
18 lines
655 B
YAML
- name: "Load base for '{{ application_id }}'"
|
|
include_tasks: 01_core.yml
|
|
when: run_once_sys_front_inj_logout is not defined
|
|
|
|
- name: "Load logout code for '{{ application_id }}'"
|
|
set_fact:
|
|
logout_code: "{{ lookup('template', 'logout_one_liner.js.j2') }}"
|
|
|
|
- name: "Collapse logout code into one-liner for '{{ application_id }}'"
|
|
set_fact:
|
|
logout_code_one_liner: "{{ logout_code | to_one_liner }}"
|
|
|
|
- name: "Append logout CSP hash for '{{ application_id }}'"
|
|
set_fact:
|
|
applications: "{{ applications | append_csp_hash(application_id, logout_code_one_liner) }}"
|
|
changed_when: false
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|