Habilita login com gov br

Author: lpirola

config/plugins.php

@@ -2,9 +2,40 @@
 
 return [
     'plugins' => [
-         'MultipleLocalAuth',
-         'AdminLoginAsUser',
-         'RecreatePCacheOnLogin',
-         'SpamDetector'
+        'MultipleLocalAuth' => [
+            'namespace' => 'MultipleLocalAuth',
+            'config' => array(
+                'salt' => env('AUTH_SALT', null),
+                'timeout' => '24 hours',
+                'strategies' => [
+                    'govbr' => [
+                        'visible' => env('AUTH_GOV_BR_ID', true),
+                        'response_type' => 'code',
+                        'scope' => 'openid email profile phone govbr_confiabilidades',
+                        'redirect_uri' => 'https://experimente-minc.mapas.tec.br/autenticacao/govbr/oauth2callback',
+                        'auth_endpoint' => 'https://sso.staging.acesso.gov.br/authorize',
+                        'token_endpoint' => 'https://sso.staging.acesso.gov.br/token',
+                        'nonce' => 'abc',
+                        'code_challenge_method' => 'S256',
+                        'userinfo_endpoint' => 'https://sso.acesso.gov.br/jwk',
+                        'state_salt' => "mapasminc",
+                        'applySealId' => 1,
+                        'menssagem_authenticated' => "",
+                        'dic_agent_fields_update' => [
+                            'nomeCompleto' => 'full_name',
+                            'name' => 'name',
+                            'documento' => 'cpf',
+                            'cpf' => 'cpf',
+                            'emailPrivado' => 'email',
+                            'telefone1' => 'phone_number',
+                        ]
+                    ]
+
+                ]
+            )
+        ],
+        'AdminLoginAsUser',
+        'RecreatePCacheOnLogin',
+        'SpamDetector'
     ]
 ];

dev/config.d/auth.php

@@ -7,8 +7,13 @@
     'auth.config' => [
         'salt' => env('AUTH_SALT', null),
         'wizard' => 'true',
-	'timeout' => '24 hours',
+        'timeout' => '24 hours',
         'strategies' => [
+            'GovBr' => [
+                'client_id' => env('AUTH_GOV_BR_CLIENT_ID', null),
+                'client_secret' => env('AUTH_GOV_BR_CLIENT_SECRET', null),
+                'scope' => env('AUTH_GOV_BR_SCOPE', 'openid email profile phone govbr_confiabilidades'),
+            ],
             'Facebook' => [
                 'app_id' => env('AUTH_FACEBOOK_APP_ID', null),
                 'app_secret' => env('AUTH_FACEBOOK_APP_SECRET', null),

docker-compose.yml

@@ -35,6 +35,11 @@ x-defaults: &defaults
     AUTH_LOGIN_ON_REGISTER: ${AUTH_LOGIN_ON_REGISTER}
     STATUS_CREATE_AGENT: ${STATUS_CREATE_AGENT}
     AUTH_LOGIN_BY_CPF: ${AUTH_LOGIN_BY_CPF}
+    AUTH_SALT: ${AUTH_SALT}
+    AUTH_GOV_BR_ID: ${AUTH_GOV_BR_ID}
+    AUTH_GOV_BR_CLIENT_ID: ${AUTH_GOV_BR_CLIENT_ID}
+    AUTH_GOV_BR_CLIENT_SECRET: ${AUTH_GOV_BR_CLIENT_SECRET}
+    AUTH_GOV_BR_SCOPE: ${AUTH_GOV_BR_SCOPE}
 
 services:
   backend: