Add configurations for websso

[Flavio Picci]

Hello everyone,

I would like to add a few configuration lines to support Horizon auto redirections (login and logout) when using WEBSSO.

In my local installation I added the following lines to horizon_local_settings.py.j2:

```
{% if horizon_websso_initial_choice != "credentials" and horizon_websso_default_redirect is defined %}
# Set default SSO redirect to seleteced protocol
WEBSSO_DEFAULT_REDIRECT = {{ horizon_websso_default_redirect | bool }}
WEBSSO_DEFAULT_REDIRECT_PROTOCOL = "{{ horizon_websso_initial_choice }}"

# Default (login) redirect base URL
{% if horizon_websso_keystone_url is defined %}
WEBSSO_DEFAULT_REDIRECT_REGION = "{{ horizon_websso_keystone_url }}"
{% else %}
WEBSSO_DEFAULT_REDIRECT_REGION = "{{ horizon_keystone_endpoint }}"
{% endif %}

{% This might be computed %}
{% if horizon_websso_default_redirect_logout is defined %}
# SSO logout URL
WEBSSO_DEFAULT_REDIRECT_LOGOUT = "{{ horizon_websso_default_redirect_logout }}"

{% endif %}
{% endif %}
```

`The WEBSSO_DEFAULT_REDIRECT_LOGOUT` might be computed depending on the `horizon_websso_initial_choice` variable containing the default protocol the user want to use.
In my installation I use saml2, so I computed the horizon_websso_default_redirect_logout like this: `{{ keystone_service_publicuri }}/Shibboleth.sso/Logout?return=https://{{ external_lb_vip_address }}`

I am using the Victoria release.

Thanks,
Flavio

[Dmitriy Rabotyagov (noonedeadpunk)]

Hi!

I'd suggest pushing an upstream patch to cover this usecase. For this you will need to configure gerrit account (login is performed with ubuntu one - same account as you used for Launchpad): https://docs.openstack.org/contributors/common/setup-gerrit.html

After that you will be able to use git-review to push changes: https://docs.openstack.org/contributors/code-and-documentation/using-gerrit.html

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/786467

[Dmitriy Rabotyagov (noonedeadpunk)]

Hi,

Please kindly check suggested patch and if it covers your needs

[Flavio Picci (flaviopicci)]

Hello Dmitriy,

the proposed patch fully satisfies my needs!
Thanks a lot for implementing this feature.

Many thanks,
Flavio

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/786467
Committed: https://opendev.org/openstack/openstack-ansible-os_horizon/commit/3b0abcbcd331f6db53e2040f6ff8759db233065c
Submitter: "Zuul (22348)"
Branch: master

commit 3b0abcbcd331f6db53e2040f6ff8759db233065c
Author: Dmitriy Rabotyagov <email address hidden>
Date: Thu Apr 15 19:30:46 2021 +0300

    Implement WEBSSO redirect

    This patch adds ability to configure horizon auto redirections when
    WEBSSO is used.

    Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/785800
    Change-Id: I2a1beddaed3a31d1c01d1310dc8b739c9c93d9dd
    Closes-Bug: #1922687

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_horizon yoga-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_horizon wallaby-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_horizon xena-eom release.