##
## On all sites, provide RSS-Bridge on a default path: /rss-bridge
## Allow valid LDAP users from groups 'feed-reader' and 'admin'.
##
Alias /rss-bridge /usr/share/rss-bridge

<Location /rss-bridge>
    <If "%{QUERY_STRING} =~ /format=[^H]/">
        # Formats: Atom, Json, Mrss and Plaintext
        Include includes/freedombox-auth-ldap.conf
        Require ldap-group cn=admin,ou=groups,dc=thisbox
        Require ldap-group cn=feed-reader,ou=groups,dc=thisbox
    </If>
    <Else>
        # Formats: Html and all other pages
        Include includes/freedombox-single-sign-on.conf
        <IfModule mod_auth_pubtkt.c>
            TKTAuthToken "feed-reader" "admin"
        </IfModule>
    </Else>
</Location>