🛂 Port Auth0 client changes (#5584)

Signed-off-by: Jacob Woffenden <[email protected]>
ministryofjustice · Oct 9, 2024 · 5674e09 · 5674e09
1 parent f57e920
commit 5674e09
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 8 deletions.
diff --git a/terraform/auth0/ministryofjustice-data-platform-development/auth0-clients.tf b/terraform/auth0/ministryofjustice-data-platform-development/auth0-clients.tf
@@ -1,8 +1,9 @@
 resource "auth0_client" "data_platform_control_panel" {
-  name        = "data-platform-control-panel"
-  app_type    = "regular_web"
-  description = "Data Platform Control Panel"
-  logo_uri    = "https://assets.development.data-platform.service.justice.gov.uk/assets/justice-digital-logo.png"
+  name              = "data-platform-control-panel"
+  app_type          = "regular_web"
+  description       = "Data Platform Control Panel"
+  logo_uri          = "https://assets.development.data-platform.service.justice.gov.uk/assets/justice-digital-logo.png"
+  cross_origin_auth = true
 }
 
 resource "auth0_connection_client" "data_platform_control_panel_entra_id" {

diff --git a/terraform/auth0/ministryofjustice-data-platform/auth0-clients.tf b/terraform/auth0/ministryofjustice-data-platform/auth0-clients.tf
@@ -1,8 +1,9 @@
 resource "auth0_client" "data_platform_control_panel" {
-  name        = "data-platform-control-panel"
-  app_type    = "regular_web"
-  description = "Data Platform Control Panel"
-  logo_uri    = "https://assets.data-platform.service.justice.gov.uk/assets/justice-digital-logo.png"
+  name              = "data-platform-control-panel"
+  app_type          = "regular_web"
+  description       = "Data Platform Control Panel"
+  logo_uri          = "https://assets.data-platform.service.justice.gov.uk/assets/justice-digital-logo.png"
+  cross_origin_auth = true
 }
 
 resource "auth0_connection_client" "data_platform_control_panel_entra_id" {

diff --git a/terraform/aws/analytical-platform-development/cluster/auth0-clients.tf b/terraform/aws/analytical-platform-development/cluster/auth0-clients.tf
@@ -9,6 +9,7 @@ resource "auth0_client" "airflow_sqlite" {
   callbacks           = ["https://*-airflow-sqlite.tools.${var.route53_zone}/callback"]
   allowed_logout_urls = ["https://*-airflow-sqlite.tools.${var.route53_zone}"]
   oidc_conformant     = true
+  cross_origin_auth   = true
   jwt_configuration {
     alg = "RS256"
   }
@@ -25,6 +26,7 @@ resource "auth0_client" "rstudio" {
   callbacks           = ["https://*-rstudio.tools.${var.route53_zone}/callback"]
   allowed_logout_urls = ["https://*-rstudio.tools.${var.route53_zone}"]
   oidc_conformant     = true
+  cross_origin_auth   = true
   jwt_configuration {
     alg = "HS256"
   }
@@ -41,6 +43,7 @@ resource "auth0_client" "jupyter_lab" {
   callbacks           = ["https://*-jupyter-lab.tools.${var.route53_zone}/callback"]
   allowed_logout_urls = ["https://*-jupyter-lab.tools.${var.route53_zone}"]
   oidc_conformant     = true
+  cross_origin_auth   = true
   jwt_configuration {
     alg = "HS256"
   }
@@ -57,6 +60,7 @@ resource "auth0_client" "controlpanel" {
   callbacks           = ["https://controlpanel.services.${var.route53_zone}/oidc/callback/", "http://localhost:8000/oidc/callback/"]
   allowed_logout_urls = ["https://controlpanel.services.${var.route53_zone}", "http://localhost:8000/"]
   oidc_conformant     = true
+  cross_origin_auth   = true
   jwt_configuration {
     alg = "RS256"
   }