chore: change settings for new auth method

City-of-Helsinki · May 2, 2024 · a6c34f5 · a6c34f5
1 parent a615219
commit a6c34f5
Showing 1 changed file with 10 additions and 4 deletions.
diff --git a/backend/benefit/helsinkibenefit/settings.py b/backend/benefit/helsinkibenefit/settings.py
@@ -82,10 +82,16 @@
         "d5c8a2743d726a33dbd637fac39d6f0712dcee4af36142fb4fb15afa17b1d9bf",
     ),
     SESSION_COOKIE_AGE=(int, 60 * 60 * 2),
-    TOKEN_AUTH_ACCEPTED_AUDIENCE=(str, "https://api.hel.fi/auth/helsinkibenefit"),
-    TOKEN_AUTH_ACCEPTED_SCOPE_PREFIX=(str, "helsinkibenefit"),
-    TOKEN_AUTH_AUTHSERVER_URL=(str, "https://api.hel.fi/sso/openid"),
-    TOKEN_AUTH_FIELD_FOR_CONSENTS=(str, "https://api.hel.fi/auth"),
+    TOKEN_AUTH_ACCEPTED_AUDIENCE=(
+        str,
+        "exampleapp-api",
+    ),  # TODO: replace & refactor for each app
+    TOKEN_AUTH_ACCEPTED_SCOPE_PREFIX=(str, "access"),
+    TOKEN_AUTH_AUTHSERVER_URL=(
+        str,
+        "https://tunnistus.hel.fi/auth/realms/helsinki-tunnistus",
+    ),
+    TOKEN_AUTH_FIELD_FOR_CONSENTS=(str, "authorization.permissions.scopes"),
     TOKEN_AUTH_REQUIRE_SCOPE_PREFIX=(bool, True),
     OIDC_LEEWAY=(int, 60 * 60 * 2),
     OIDC_RP_CLIENT_ID=(str, ""),