introduce redirect_uri setting for IAM4NFDI OIDC provider

.env_template

@@ -4,3 +4,5 @@ DALIA_TRIPLESTORE_BASE_URL=http://fuseki:3030/
 
 IAM4NFDI_CLIENT_ID=
 IAM4NFDI_CLIENT_SECRET=
+# Redirect URI should point to the frontend's /auth/callback/iam4nfdi page (absolute URL).
+IAM4NFDI_REDIRECT_URI=

project/settings.py

@@ -142,13 +142,17 @@ DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
 
 # django-allauth settings
 HEADLESS_ONLY = True
-
 SOCIALACCOUNT_PROVIDERS = {}
 
 IAM4NFDI_CLIENT_ID = os.environ.get("IAM4NFDI_CLIENT_ID", None)
 IAM4NFDI_CLIENT_SECRET = os.environ.get("IAM4NFDI_CLIENT_SECRET", None)
+IAM4NFDI_REDIRECT_URI = os.environ.get("IAM4NFDI_REDIRECT_URI", None)
+
+if IAM4NFDI_CLIENT_ID and IAM4NFDI_CLIENT_SECRET and IAM4NFDI_REDIRECT_URI:
+    HEADLESS_FRONTEND_URLS = {
+        "socialaccount_login_error": IAM4NFDI_REDIRECT_URI,
+    }
 
-if IAM4NFDI_CLIENT_ID and IAM4NFDI_CLIENT_SECRET:
     SOCIALACCOUNT_PROVIDERS["openid_connect"] = {
         "APPS": [
             {
@@ -159,6 +163,10 @@ if IAM4NFDI_CLIENT_ID and IAM4NFDI_CLIENT_SECRET:
                 "settings": {
                     "server_url": "https://infraproxy.nfdi-aai.dfn.de/.well-known/openid-configuration",
                 },
+                "auth_params": {
+                    # "response_type": "...",  # Can be "code", "id_token" or "token" depending on OIDC provider config.
+                    "redirect_uri": IAM4NFDI_REDIRECT_URI,
+                },
             },
         ],
     }