Habilita login com gov br

Author: lpirola

.env.sample

@@ -36,3 +36,21 @@ AUTH_EMAIL_IMAGE=
 AUTH_LOGIN_ON_REGISTER=true
 STATUS_CREATE_AGENT=1
 AUTH_LOGIN_BY_CPF=false
+
+AUTH_GOV_BR_ID=true
+AUTO_GOV_RESPONSE_TYPE=code
+AUTH_GOV_BR_CLIENT_ID=client_id
+AUTH_GOV_BR_CLIENT_SECRET=secret
+AUTH_GOV_BR_SCOPE=openid email profile phone govbr_confiabilidades
+AUTH_GOV_BR_REDIRECT_URI=https://gov.br/autenticacao/oauth2callback
+AUTH_GOV_BR_ENDPOINT=https://gov.br/authorize
+AUTH_GOV_BR_TOKEN_ENDPOINT=https://gov.br/token
+AUTH_GOV_BR_NONCE=mapas
+AUTH_GOV_BR_CODE_VERIFIER=vbQ71yzBAphMeargyG6EG_It9P6-kqSIrgRyT-hGwIQ
+AUTH_GOV_BR_CODE_CHALLENGE=wwheOwufT6pFeAuIaHo8QmMT4k6r2gh0N1X_zHQK7LU
+AUTH_GOV_BR_CODE_CHALLENGE_METHOD=S256
+AUTH_GOV_BR_USERINFO_ENDPOINT=https://gov.br/jwk
+AUTH_GOV_BR_STATE_SALT=mapas
+AUTH_GOV_BR_APPLY_SEAL_ID=1
+AUTH_GOV_BR_MENSSAGEM_AUTHENTICATED=Usuário já se autenticou pelo GovBr
+AUTH_GOV_BR_DICT_AGENT_FIELDS_UPDATE="['nomeCompleto' => 'full_name', 'name' => 'name', 'documento' => 'cpf', 'cpf' => 'cpf', 'emailPrivado' => 'email', 'telefone1' => 'phone_number']"

config/authentication.php

@@ -13,12 +13,40 @@
         'wizard' => 'true',
         'timeout' => '24 hours',
         'strategies' => [
-           'Facebook' => [
+            'govbr' => [
+                  'client_id' => env('AUTH_GOV_BR_CLIENT_ID', null),
+                  'client_secret' => env('AUTH_GOV_BR_CLIENT_SECRET', null),
+                  'scope' => env('AUTH_GOV_BR_SCOPE', 'openid email profile phone govbr_confiabilidades'),
+                  'visible' => env('AUTH_GOV_BR_ID', true),
+                  'response_type' => 'code',
+                  'scope' => 'openid email profile phone govbr_confiabilidades',
+                  'redirect_uri' => 'https://experimente-minc.mapas.tec.br/autenticacao/autenticacao/govbr/oauth2callback', 
+                  'auth_endpoint' => 'https://sso.staging.acesso.gov.br/authorize',
+                  'token_endpoint' => 'https://sso.staging.acesso.gov.br/token',
+                  'nonce' => 'abc',
+                  /*'userinfo_endpoint' => 'https://sso.staging.acesso.gov.br/jwk',*/
+                  'state_salt' => "mapasminc",
+                  'code_challenge_method' => 'S256',
+                  'code_challenge' => env('AUTH_GOV_CODE_CHALLENGE', 'wwheOwufT6pFeAuIaHo8QmMT4k6r2gh0N1X_zHQK7LU'),
+                  'code_verifier' => env('AUTH_GOV_CODE_VERIFIER', 'vbQ71yzBAphMeargyG6EG_It9P6-kqSIrgRyT-hGwIQ'),
+                  'applySealId' => 1,
+                  'menssagem_authenticated' => "",
+                  'dic_agent_fields_update' => [
+                      'nomeCompleto' => 'full_name',
+                      'name' => 'name',
+                      'documento' => 'cpf',
+                      'cpf' => 'cpf',
+                      'emailPrivado' => 'email',
+                      'telefone1' => 'phone_number',
+                  ]
+            ],
+
+            'Facebook' => [
                'app_id' => env('AUTH_FACEBOOK_APP_ID', null),
                'app_secret' => env('AUTH_FACEBOOK_APP_SECRET', null),
                'scope' => env('AUTH_FACEBOOK_SCOPE', 'email'),
             ],
-            
+
             'Google' => [
                 'client_id' => env('AUTH_GOOGLE_CLIENT_ID', null),
                 'client_secret' => env('AUTH_GOOGLE_CLIENT_SECRET', null),

config/plugins.php

@@ -2,9 +2,9 @@
 
 return [
     'plugins' => [
-         'MultipleLocalAuth',
-         'AdminLoginAsUser',
-         'RecreatePCacheOnLogin',
-         'SpamDetector'
+        'MultipleLocalAuth',
+        'AdminLoginAsUser',
+        'RecreatePCacheOnLogin',
+        'SpamDetector'
     ]
 ];

docker-compose.yml

@@ -36,6 +36,24 @@ x-defaults: &defaults
     STATUS_CREATE_AGENT: ${STATUS_CREATE_AGENT}
     AUTH_LOGIN_BY_CPF: ${AUTH_LOGIN_BY_CPF}
 
+    AUTH_GOV_BR_ID: ${AUTH_GOV_BR_ID}
+    AUTO_GOV_RESPONSE_TYPE: ${AUTO_GOV_RESPONSE_TYPE}
+    AUTH_GOV_BR_CLIENT_ID: ${AUTH_GOV_BR_CLIENT_ID}
+    AUTH_GOV_BR_CLIENT_SECRET: ${AUTH_GOV_BR_CLIENT_SECRET}
+    AUTH_GOV_BR_SCOPE: ${AUTH_GOV_BR_SCOPE}
+    AUTH_GOV_BR_REDIRECT_URI: ${AUTH_GOV_BR_REDIRECT_URI}
+    AUTH_GOV_BR_ENDPOINT: ${AUTH_GOV_BR_ENDPOINT}
+    AUTH_GOV_BR_TOKEN_ENDPOINT: ${AUTH_GOV_BR_TOKEN_ENDPOINT}
+    AUTH_GOV_BR_NONCE: ${AUTH_GOV_BR_NONCE}
+    AUTH_GOV_BR_CODE_VERIFIER: ${AUTH_GOV_BR_CODE_VERIFIER}
+    AUTH_GOV_BR_CODE_CHALLENGE: ${AUTH_GOV_BR_CODE_CHALLENGE}
+    AUTH_GOV_BR_CODE_CHALLENGE_METHOD: ${AUTH_GOV_BR_CODE_CHALLENGE_METHOD}
+    AUTH_GOV_BR_USERINFO_ENDPOINT: ${AUTH_GOV_BR_USERINFO_ENDPOINT}
+    AUTH_GOV_BR_STATE_SALT: ${AUTH_GOV_BR_STATE_SALT}
+    AUTH_GOV_BR_APPLY_SEAL_ID: ${AUTH_GOV_BR_APPLY_SEAL_ID}
+    AUTH_GOV_BR_MENSSAGEM_AUTHENTICATED: ${AUTH_GOV_BR_MENSSAGEM_AUTHENTICATED}
+    AUTH_GOV_BR_DICT_AGENT_FIELDS_UPDATE: ${AUTH_GOV_BR_DICT_AGENT_FIELDS_UPDATE}
+
 services:
   backend:
     <<: *defaults