theseus/config/initializers/omniauth.rb
nora b1c8b2f91a
Sign in with Hack Club for back_office users (#185)
* add HCA for back office users

* maybe better initializer?
2025-12-11 17:03:19 -05:00

18 lines
762 B
Ruby

# frozen_string_literal: true
Rails.application.config.middleware.use OmniAuth::Builder do
provider :openid_connect,
name: :hackclub,
issuer: Rails.application.config.hack_club_auth.base_url,
discovery: true,
client_options: {
identifier: Rails.application.config.hack_club_auth.client_id,
secret: Rails.application.config.hack_club_auth.client_secret,
redirect_uri: ->(env) { "#{env['rack.url_scheme']}://#{env['HTTP_HOST']}/back_office/auth/hackclub/callback" }
},
scope: %i[openid profile email slack_id]
end
OmniAuth.config.path_prefix = "/back_office/auth"
OmniAuth.config.request_validation_phase = OmniAuth::AuthenticityTokenProtection.new(key: :_csrf_token)
OmniAuth.config.allowed_request_methods = [:post]