From 66dad1c104f87fcef5583bf346e9576ba65a25fb Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Tue, 13 Sep 2016 13:26:39 +0000
Subject: We trust our own IdP and its identities

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/mediawiki/templates/LocalSettings.php.fp.j2 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/mediawiki/templates/LocalSettings.php.fp.j2 b/roles/mediawiki/templates/LocalSettings.php.fp.j2
index b7bc979ce..06df38b85 100644
--- a/roles/mediawiki/templates/LocalSettings.php.fp.j2
+++ b/roles/mediawiki/templates/LocalSettings.php.fp.j2
@@ -329,6 +329,7 @@ $wgOpenIDMode = 'consumer';
 $wgOpenIDTrustRoot = 'https://stg.fedoraproject.org/w/';
 $wgOpenIDConsumerDenyByDefault = true;
 $wgOpenIDServerForceAllowTrust = 'https://id.stg.fedoraproject.org/openid/';
+$wgOpenIDConsumerAllow = array ("#^https://id.stg.fedoraproject.org/openid/$#", "#^http://([a-z0-9]+).id.stg.fedoraproject.org/$#");
 $wgOpenIDProposeUsernameFromSREG = true;
 $wgOpenIDAllowNewAccountname = false;
 $wgOpenIDAllowExistingAccountSelection = false;
-- 
cgit