From de7badc58326a6376e2a340c61a6985f74f83b02 Mon Sep 17 00:00:00 2001
From: muppeth <muppeth@disroot.org>
Date: Tue, 4 Jun 2024 21:51:12 +0200
Subject: [PATCH] Update to version 2.0.3 (#26)

Co-authored-by: meaz <meaz@disroot.org>
Reviewed-on: https://git.disroot.org/Disroot-Ansible/etherpad/pulls/26
Reviewed-by: meaz <meaz@no-reply@disroot.org>
Co-authored-by: muppeth <muppeth@disroot.org>
Co-committed-by: muppeth <muppeth@disroot.org>
---
 defaults/main.yml                             |  3 +-
 .../var/www/etherpad-lite/settings.json.j2    | 38 +++++++++++++++++++
 2 files changed, 40 insertions(+), 1 deletion(-)

diff --git a/defaults/main.yml b/defaults/main.yml
index 2f1090e..467bd11 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -1,6 +1,6 @@
 ---
 
-etherpad_version: '2.0.2'
+etherpad_version: '2.1.0'
 etherpad_skin: 'colibris'
 etherpad_skinVariants: 'super-light-toolbar super-light-editor light-background'
 etherpad_username: 'etherpad'
@@ -27,6 +27,7 @@ etherpad_indentationOnNewLine: 'false'
 etherpad_importExportRateLimitingwindowMs: '90000'
 etherpad_importExportRateLimitingMax: '10'
 etherpad_importMaxFileSize: '52428800' # 50 MB -> 50 * 1024 * 1024
+etherpad_authmethod: 'sso'
 etherpad_exposeVersion: 'false'
 etherpad_js_maxage: '21600'
 etherpad_max_log_size: '1024'
diff --git a/templates/var/www/etherpad-lite/settings.json.j2 b/templates/var/www/etherpad-lite/settings.json.j2
index 5750f45..647ac99 100644
--- a/templates/var/www/etherpad-lite/settings.json.j2
+++ b/templates/var/www/etherpad-lite/settings.json.j2
@@ -600,6 +600,13 @@
    */
   "importMaxFileSize": {{ etherpad_importMaxFileSize }}, // 50 * 1024 * 1024
 
+  /*
+    The authentication method used by the server.
+    The default value is sso
+    If you want to use the old authentication system, change this to apikey
+   */
+  "authenticationMethod": "${AUTHENTICATION_METHOD:{{ etherpad_authmethod }}}",
+
   /*
    * From Etherpad 1.8.5 onwards, when Etherpad is in production mode commits from individual users are rate limited
    *
@@ -665,4 +672,35 @@
    * Enable/Disable case-insensitive pad names.
    */
   "lowerCasePadIds": false
+  
+  /*"sso": {
+    "issuer": "${SSO_ISSUER:http://localhost:9001}",
+      "clients": [
+        {
+          "client_id": "${ADMIN_CLIENT:admin_client}",
+          "client_secret": "${ADMIN_SECRET:admin}",
+          "grant_types": ["authorization_code"],
+          "response_types": ["code"],
+          "redirect_uris": ["${ADMIN_REDIRECT:http://localhost:9001/admin/}"]
+        },
+        {
+          "client_id": "${USER_CLIENT:user_client}",
+          "client_secret": "${USER_SECRET:user}",
+          "grant_types": ["authorization_code"],
+          "response_types": ["code"],
+          "redirect_uris": ["${USER_REDIRECT:http://localhost:9001/}"]
+        }
+      ]
+    }
+   */
+    /* Set the time to live for the tokens
+         This is the time of seconds a user is logged into Etherpad
+    "ttl":  {
+        "AccessToken": 3600,
+        "AuthorizationCode": 600,
+        "ClientCredentials": 3600,
+        "IdToken": 3600,
+        "RefreshToken": 86400
+    }
+    */
 }