Using PrivateKeyFiles parameter in oidc_settings causes unrecognized key error

[uoe-pjackson]

Describe the Bug

When specifying PrivateKeyFiles parameter for oidc_settings puppet fails with

Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Apache::Vhost[example.com]: parameter 'oidc_settings' unrecognized key 'PrivateKeyFiles'

It appears that PrivateKeyFiles is missing from the definition of Apache::OIDCSettings, so should be a case of just adding it.

Expected Behaviour

Successful application of the puppet catalog

Steps to Reproduce

Steps to reproduce the behaviour:

1. Use the following vhost manifest

apache::vhost { "example.com":
    port              => 80,
    auth_oidc         => true,
    oidc_settings     => {
      'ProviderMetadataURL'       => $oidc_provider_metadata_url,
      'Scope'                     => $oidc_scope,
      'RemoteUserClaim'           => $oidc_remote_user_claim,
      'ClientID'                  => $oidc_client_id,
      'CryptoPassphrase'          => $oidc_crypto_passphrase,
      'PrivateKeyFiles'           => "/etc/pki/tls/private/${siapp_url}-selfsigned.key",
      'PublicKeyFiles'            => "/etc/pki/tls/certs/${siapp_url}-selfsigned.crt",
      'ProviderTokenEndpointAuth' => 'private_key_jwt',
      'RedirectURI'               => '/oidc/redirect',
    }
  }

Environment

• Puppet: 7
• Apache Forge: 12.1.0
• Rocky Linux 8

[uoe-pjackson]

After further investigation there appears to be a number of other configuration parameters in the lastest mod_auth_openidc that aren't defined in Apache::OIDCSettings.

The full list is:

CABundlePath
CacheDir
ClientTokenEndpointKeyPassword
CookieDomain
CookiePath
DefaultLoggedOutURL
DPoPMode
FilterClaimsExpr
LogoutRequestParams
LogoutXFrameOptions
MemCacheConnectionsHMax
MemCacheConnectionsMin
MemCacheConnectionsSMax
MemCacheConnectionsTTL
MetricsData
MetricsPublish
OAuthIntrospectionEndpoint
OAuthIntrospectionEndpointKeyPassword
OAuthTokenIntrospectionInterval
PassAccessToken
PKCEMethod
PreservePostTemplates
PrivateKeyFiles
ProviderPushedAuthorizationRequestEndpoint
ProviderSignedJwksUri
ProviderVerifyCertFiles
RedirectURLsAllowed
RedisCacheConnectTimeout
RedisCacheDatabase
RedisCacheTimeout
RedisCacheUsername
StateCookiePrefix
StateInputHeaders
TraceParent
UnAutzAction
UserInfoClaimsExpr
UserInfoSignedResponseAlg
ValidateIssuer

I'm preparing a pull request to add these parameters.