wordpress: Use OpenID Connect instead of pubtkt based SSO when private

Tests:

- Functional tests work.

- Admin user is able to access the application

- User belonging to special group is able to access the application

- Regular user is not able to access the application

- Anonymous user is not able to access the application

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
This commit is contained in:
Sunil Mohan Adapa 2025-11-24 08:58:15 -08:00 committed by James Valleroy
parent efe2bccb11
commit 29ef56b51e
No known key found for this signature in database
GPG Key ID: 77C0C75E7B650808

View File

@ -30,10 +30,7 @@ Alias /wordpress /usr/share/wordpress
# Allow access only if site is marked as public or if user is an admin
<IfFile !/etc/wordpress/is_public>
Include includes/freedombox-single-sign-on.conf
<IfModule mod_auth_pubtkt.c>
TKTAuthToken "admin"
</IfModule>
Use AuthOpenIDConnect
</IfFile>
# Increase maximum upload file size
@ -47,10 +44,7 @@ Alias /wordpress /usr/share/wordpress
# Allow access only if site is marked as public or if user is an admin
<IfFile !/etc/wordpress/is_public>
Include includes/freedombox-single-sign-on.conf
<IfModule mod_auth_pubtkt.c>
TKTAuthToken "admin"
</IfModule>
Use AuthOpenIDConnect
</IfFile>
<IfFile /etc/wordpress/is_public>