cd-laravel-base/config/cu-auth.php at main · CornellCustomDev/cd-laravel-base · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
<?php

return [
    /*
    |--------------------------------------------------------------------------
    | Identity Manager
    |--------------------------------------------------------------------------
    |
    | The identity manager to use for user authentication. Options are:
    | - apache-shib: Apache mod_shib
    | - php-saml: OneLogin SAML PHP Toolkit
    |
    */
    'identity_manager' => env('CU_AUTH_IDENTITY_MANAGER', 'apache-shib'),

    /*
    |--------------------------------------------------------------------------
    | Require Local User
    |--------------------------------------------------------------------------
    |
    | Require a local user account in the application for the authenticated
    | remote user. This setting controls the CUAuthenticated event to handle
    | user login.
    |
    */
    'require_local_user' => env('REQUIRE_LOCAL_USER', true),

    /*
    |--------------------------------------------------------------------------
    | ApacheShib Configuration
    |--------------------------------------------------------------------------
    |
    | ApacheShib retrieves user data from server variables populated by the
    | Apache shibboleth module (mod_shib).
    |
    | The default user variable is "REMOTE_USER", but this may differ depending
    | on how mod_shib is configured.
    |
    | For local development without shibboleth, you can add
    | REMOTE_USER=<netid> to your project .env file to log in as that user.
    |
    */
    'apache_shib_user_variable' => env('APACHE_SHIB_USER_VARIABLE', 'REMOTE_USER'),
    'remote_user_override' => env('REMOTE_USER'),

    /*
    |--------------------------------------------------------------------------
    | PHP-SAML Configuration
    |--------------------------------------------------------------------------
    |
    | Note: Configuration for the OneLogin SAML PHP Toolkit can be found
    | in config/php-saml-toolkit.php.
    |
    | The default path of storage/app/keys is ignored by git in a standard
    | Laravel installation, so typically this does not need to be changed.
    |
    */
    'cert-path' => storage_path(env('SAML_CERT_PATH', 'app/keys')),

    /*
    |--------------------------------------------------------------------------
    | AppTesters Configuration
    |--------------------------------------------------------------------------
    |
    | Comma-separated list of users to allow in development environments.
    | APP_TESTERS_FIELD is the field on the user model to compare against.
    |
    */
    'app_testers' => env('APP_TESTERS', ''),
    'app_testers_field' => env('APP_TESTERS_FIELD', 'netid'),

    /*
    |--------------------------------------------------------------------------
    | Allow Local Login
    |--------------------------------------------------------------------------
    |
    | Allow Laravel password-based login? Typically, this would only be used
    | for local or automated testing.
    |
    */
    'allow_local_login' => boolval(env('ALLOW_LOCAL_LOGIN', false)),
];