Add rocketchat oauth client

ansible/group_vars/all/oas.yml

@@ -38,6 +38,7 @@ userpanel_oauth_client_secret: "{{ lookup('password', '{{ cluster_dir }}/secrets
 nextcloud_oauth_client_secret: "{{ lookup('password', '{{ cluster_dir }}/secrets/nextcloud_oauth_client_secret chars=ascii_letters') }}"
 grafana_oauth_client_secret: "{{ lookup('password', '{{ cluster_dir }}/secrets/grafana_oauth_client_secret chars=ascii_letters') }}"
 wordpress_oauth_client_secret: "{{ lookup('password', '{{ cluster_dir }}/secrets/wordpress_oauth_client_secret chars=ascii_letters') }}"
+rocketchat_oauth_client_secret: "{{ lookup('password', '{{ cluster_dir }}/secrets/rocketchat_oauth_client_secret chars=ascii_letters') }}"
 userbackend_postgres_password: "{{ lookup('password', '{{ cluster_dir }}/secrets/userbackend_postgres_password chars=ascii_letters') }}"
 userbackend_admin_username: "admin"
 userbackend_admin_password: "{{ lookup('password', '{{ cluster_dir }}/secrets/userbackend_admin_password chars=ascii_letters') }}"

ansible/roles/apps/templates/single-sign-on-settings.yaml

@@ -28,6 +28,8 @@ userbackend:
       description: "Nextcloud Files offers an on-premise Universal File Access and sync platform with powerful collaboration capabilities and desktop, mobile and web interfaces."
     - name: &WORDPRESS wordpress
       description: "WordPress website hosting."
+    - name: &ROCKETCHAT rocketchat
+      description: "Communicate and collaborate using team chat and switch to video or audio calls with screen sharing for more efficient teamwork."
     - name: &GRAFANA grafana
       description: "Grafana allows you to query, visualize, alert on and understand metrics generated by OpenAppStack. It can be used to create explore and share dashboards."
   username: "{{ userbackend_admin_username }}"
@@ -103,6 +105,20 @@ oAuthClients:
     - "code"
   grantTypes:
     - "implicit"
+- clientName: *ROCKETCHAT
+  clientSecret: "{{ rocketchat_oauth_client_secret }}"
+  redirectUri: "https://chat.{{ domain }}/_oauth/openappstack"
+  scopes: "openid profile email openappstack_roles"
+  clientUri: "https://chat.{{ domain }}"
+  clientLogoUri: "https://chat.{{ domain }}/images/logo/logo.svg"
+  tokenEndpointAuthMethod: "client_secret_post"
+  responseTypes:
+    - "code"
+    - "id_token"
+  grantTypes:
+    - "authorization_code"
+    - "refresh_token"
+    - "client_credentials"
 - clientName: *GRAFANA
   clientSecret: "{{ grafana_oauth_client_secret }}"
   redirectUri: "https://grafana.{{ domain }}/login/generic_oauth"