Configure Authentication in flexAI

OIDC_PROVIDER

string

• default is oidc_default

• if using Auth0 set to auht0

• if using Amazon AWS Cognito set to cognito

oidc_default

OIDC_TOKEN_ENDPOINT_URL

string

token endpoint url

OIDC_AUTHORIZATION_ENDPOINT_URL

string

authorization endpoint url

OIDC_END_SESSION_ENDPOINT_URL

string

end session endpoint url

OIDC_ISSUER_URL

string

issuer url

OIDC_JWKS_URI_URL

string

jwks url

CLUSTER_OAUTH_ADDRESS

string

CLUSTER_OAUTH_HTTPS_PORT

integer

443

CLUSTER_OAUTH_SNI

string

CLUSTER_JWKS_ADDRESS

string

CLUSTER_JWKS_HTTPS_PORT

integer

443

CLUSTER_OAUTH_SNI

string

OIDC_CLIENT_ID

string

Client ID

OIDC_CLIENT_SECRET

string

Client Secret

OIDC_HMAC_SECRET

string

not necessary to configure

hmac_secret_not_neccesary_to_change

TOKEN_CODE_VERIFIER_EXPIRES_IN

time in seconds

https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/oauth2/v3/oauth.proto#envoy-v3-api-field-extensions-filters-http-oauth2-v3-oauth2config-code-verifier-token-expires-in

600s

TOKEN_CSRF_EXPIRES_IN

time in seconds

https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/oauth2/v3/oauth.proto#envoy-v3-api-field-extensions-filters-http-oauth2-v3-oauth2config-csrf-token-expires-in

600s

TOKEN_DEFAULT_REFRESH_EXPIRES_IN

time in seconds

https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/oauth2/v3/oauth.proto#envoy-v3-api-field-extensions-filters-http-oauth2-v3-oauth2config-default-refresh-token-expires-in

36000s

TOKEN_DEFAULT_EXPIRES_IN

time in seconds

https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/oauth2/v3/oauth.proto#envoy-v3-api-field-extensions-filters-http-oauth2-v3-oauth2config-default-expires-in

3600s

FLEXAI_HOST_PROT

string

Only set when using Amazon AWS Cognito

https | http

https

FLEXAI_HOST_NAME

string

Only set when using Amazon AWS Cognito

FQDN of the flexAI installation

FLEXAI_HOST_PORT

integer

Only set when using Amazon AWS Cognito

port number

443