From 90b48d68b6c71c7cf1479837439e03d0f69af6f9 Mon Sep 17 00:00:00 2001
From: Tim McCormack <tmccormack@edx.org>
Date: Wed, 25 Aug 2021 20:37:05 +0000
Subject: [PATCH] feat: Activate Studio SSO for devstack (#28534)

This also requires using different session cookie names in devstack for
LMS and Studio so that we can properly use the OAuth flow locally, rather
than just sharing a session cookie on the localhost domain. (Note that
ports are not used for cookie segmentation in browsers.)

This depends on the following provisioning PR:
https://github.com/edx/devstack/pull/825
---
 cms/envs/devstack.py | 12 ++++++++++++
 lms/envs/devstack.py |  3 +++
 2 files changed, 15 insertions(+)

diff --git a/cms/envs/devstack.py b/cms/envs/devstack.py
index 77a7b5a792..70b966a8b9 100644
--- a/cms/envs/devstack.py
+++ b/cms/envs/devstack.py
@@ -21,6 +21,7 @@ SITE_NAME = 'localhost:8001'
 HTTPS = 'off'
 
 CMS_BASE = 'localhost:18010'
+SESSION_COOKIE_NAME = 'studio_sessionid'
 
 ################################ LOGGERS ######################################
 
@@ -47,6 +48,8 @@ LMS_BASE = 'localhost:18000'
 LMS_ROOT_URL = f'http://{LMS_BASE}'
 FEATURES['PREVIEW_LMS_BASE'] = "preview." + LMS_BASE
 
+# TODO: Remove after Studio OAuth transition is complete. See docs/guides/studio_oauth.rst
+LOGIN_URL = '/login/'
 FRONTEND_LOGIN_URL = LMS_ROOT_URL + '/login'
 FRONTEND_LOGOUT_URL = LMS_ROOT_URL + '/logout'
 FRONTEND_REGISTER_URL = LMS_ROOT_URL + '/register'
@@ -253,3 +256,12 @@ PROCTORING_USER_OBFUSCATION_KEY = '85920908f28904ed733fe576320db18cabd7b6cd'
 
 #################### Webpack Configuration Settings ##############################
 WEBPACK_LOADER['DEFAULT']['TIMEOUT'] = 5
+
+################ Using LMS SSO for login to Studio ################
+SOCIAL_AUTH_EDX_OAUTH2_KEY = 'studio-sso-key'
+SOCIAL_AUTH_EDX_OAUTH2_SECRET = 'studio-sso-secret'  # in stage, prod would be high-entropy secret
+SOCIAL_AUTH_EDX_OAUTH2_URL_ROOT = 'http://edx.devstack.lms:18000'  # routed internally server-to-server
+SOCIAL_AUTH_EDX_OAUTH2_PUBLIC_URL_ROOT = 'http://localhost:18000'  # used in browser redirect
+
+# Don't form the return redirect URL with HTTPS on devstack
+SOCIAL_AUTH_REDIRECT_IS_HTTPS = False
diff --git a/lms/envs/devstack.py b/lms/envs/devstack.py
index 79a271c22d..54918e0f3d 100644
--- a/lms/envs/devstack.py
+++ b/lms/envs/devstack.py
@@ -30,6 +30,8 @@ LMS_BASE = 'localhost:18000'
 CMS_BASE = 'localhost:18010'
 SITE_NAME = LMS_BASE
 
+SESSION_COOKIE_NAME = 'lms_sessionid'
+
 # By default don't use a worker, execute tasks as if they were local functions
 CELERY_ALWAYS_EAGER = True
 HTTPS = 'off'
@@ -41,6 +43,7 @@ IDA_LOGOUT_URI_LIST = [
     'http://localhost:18130/logout/',  # ecommerce
     'http://localhost:18150/logout/',  # credentials
     'http://localhost:18381/logout/',  # discovery
+    'http://localhost:18010/logout/',  # studio
 ]
 
 ################################ LOGGERS ######################################