chart: enable forward-auth endpoint with inactivity timeout

nais · Jan 17, 2025 · a29cc30 · a29cc30
1 parent e3fb0cc
commit a29cc30
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/charts/wonderwall/templates/fa-secret.yaml b/charts/wonderwall/templates/fa-secret.yaml
@@ -19,6 +19,9 @@ stringData:
   WONDERWALL_REDIS_CONNECTION_IDLE_TIMEOUT: "{{ .Values.redis.connectionIdleTimeout }}"
   WONDERWALL_ENCRYPTION_KEY: "{{ .Values.azure.forwardAuth.sessionCookieEncryptionKey | required ".Values.azure.forwardAuth.sessionCookieEncryptionKey is required." }}"
   WONDERWALL_SESSION_MAX_LIFETIME: "{{ .Values.azure.sessionMaxLifetime | required ".Values.azure.forwardAuth.sessionMaxLifetime is required." }}"
+  WONDERWALL_SESSION_FORWARD_AUTH: "true"
+  WONDERWALL_SESSION_INACTIVITY: "{{ .Values.azure.forwardAuth.sessionInactivity | required ".Values.azure.forwardAuth.sessionInactivity is required." }}"
+  WONDERWALL_SESSION_INACTIVITY_TIMEOUT: "{{ .Values.azure.forwardAuth.sessionInactivityTimeout | required ".Values.azure.forwardAuth.sessionInactivityTimeout is required." }}"
   WONDERWALL_SSO_DOMAIN: "{{ .Values.azure.forwardAuth.ssoDomain | required ".Values.azure.forwardAuth.ssoDomain is required." }}"
   WONDERWALL_SSO_ENABLED: "true"
   WONDERWALL_SSO_MODE: "server"

diff --git a/charts/wonderwall/values.yaml b/charts/wonderwall/values.yaml
@@ -23,6 +23,8 @@ azure:
     # 256 bits key, in standard base64 encoding
     sessionCookieEncryptionKey:
     sessionCookieName: forwardauth
+    sessionInactivity: true
+    sessionInactivityTimeout: 1h
     ssoDefaultRedirectURL:
     ssoDomain:
     ssoServerSecretName: wonderwall-azure-sso-server