[mod] role:authelia:variable lifespans and cors endpoints

roles/authelia/defaults/main.json

@@ -32,5 +32,8 @@
 	"var_authelia_notification_smtp_username": "authelia",
 	"var_authelia_notification_smtp_password": "REPLACE_ME",
 	"var_authelia_notification_smtp_sender": "authelia@example.org",
-	"var_authelia_oidc_hmac_secret": "REPLACE_ME"
+	"var_authelia_oidc_hmac_secret": "REPLACE_ME",
+	"var_authelia_oidc_lifespan_access_token": "1h",
+	"var_authelia_oidc_lifespan_refresh_token": "1m",
+	"var_authelia_oidc_cors_endpoints": null
 }

roles/authelia/templates/conf-main.json.j2

@@ -190,8 +190,16 @@
 		"oidc": {
 			"hmac_secret": "{{var_authelia_oidc_hmac_secret}}",
 			"issuer_private_key": "{{temp_tls_result.privatekey | replace('\n', '\\n')}}",
+			"lifespans": {
+				"access_token": "{{var_authelia_oidc_lifespan_access_token}}",
+				"refresh_token": "{{var_authelia_oidc_lifespan_refresh_token}}"
+			},
 			"cors": {
 				"allowed_origins_from_client_redirect_uris": true
+{% if var_authelia_oidc_cors_endpoints == None %}
+{% else %}
+				,"endpoints": {{var_authelia_oidc_cors_endpoints | to_json}}
+{% endif %}
 			},
 			"clients": [
 			]

roles/authelia/vardef.json

@@ -139,5 +139,31 @@
 	"oidc_hmac_secret": {
 		"type": "string",
 		"mandatory": true
+	},
+	"oidc_lifespan_access_token": {
+		"nullable": true,
+		"type": "string",
+		"mandatory": false
+	},
+	"oidc_lifespan_refresh_token": {
+		"nullable": true,
+		"type": "string",
+		"mandatory": false
+	},
+	"oidc_cors_endpoints": {
+		"nullable": true,
+		"type": "array",
+		"items": {
+			"type": "string",
+			"enum": [
+				"authorization",
+				"pushed-authorization-request",
+				"token",
+				"revocation",
+				"introspection",
+				"userinfo"
+			]
+		},
+		"mandatory": false
 	}
 }