othmane/ohif-viewer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use a more secure flow, and be more explicit with redirects for security's sake

Browse Source
This commit is contained in:
dannyrb 2019-05-08 13:06:15 -04:00
parent acbb593cec
commit 1803188033
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
public/config/example_openidc.js
View File

@ -15,6 +15,7 @@ window.config = {
thumbnailRendering: 'wadors', thumbnailRendering: 'wadors',
// REQUIRED TAG: // REQUIRED TAG:
// https://github.com/OHIF/ohif-core/blob/59e1e04b92be24aee5d4402445cb3dcedb746995/src/studies/retrieveStudyMetadata.js#L54 // https://github.com/OHIF/ohif-core/blob/59e1e04b92be24aee5d4402445cb3dcedb746995/src/studies/retrieveStudyMetadata.js#L54
// TODO: Remove tag after https://github.com/OHIF/ohif-core/pull/19 is merged and we bump version
requestOptions: { requestOptions: {
// auth: 'orthanc:orthanc', // undefined to use JWT + Bearer auth // auth: 'orthanc:orthanc', // undefined to use JWT + Bearer auth
requestFromBrowser: true, requestFromBrowser: true,
@ -31,8 +32,10 @@ window.config = {
// Authorization Server URL // Authorization Server URL
authority: 'http://127.0.0.1/auth/realms/master', authority: 'http://127.0.0.1/auth/realms/master',
client_id: 'ohif-viewer', client_id: 'ohif-viewer',
redirect_uri: '/callback', // `OHIFStandaloneViewer.js` redirect_uri: 'http://127.0.0.1/callback', // `OHIFStandaloneViewer.js`
response_type: 'id_token', // "Authorization Code Flow"
// Resource: https://medium.com/@darutk/diagrams-of-all-the-openid-connect-flows-6968e3990660
response_type: 'code',
scope: 'openid', // email profile openid scope: 'openid', // email profile openid
// ~ OPTIONAL // ~ OPTIONAL
post_logout_redirect_uri: '/logout-redirect.html', post_logout_redirect_uri: '/logout-redirect.html',