add JWT_AUTH config

playbooks/roles/discovery/defaults/main.yml

@@ -77,6 +77,19 @@ DISCOVERY_ORGANIZATIONS_API_URL: '{{ DISCOVERY_LMS_ROOT_URL }}/api/organizations
 DISCOVERY_MARKETING_API_URL: 'https://example.org/api/catalog/v2/'
 DISCOVERY_MARKETING_URL_ROOT: 'https://example.org/'
 
+DISCOVERY_JWT_ALGORITHM: 'HS256'
+DISCOVERY_JWT_AUDIENCE: '{{ DISCOVERY_SOCIAL_AUTH_EDX_OIDC_KEY }}'
+DISCOVERY_JWT_ISSUER: '{{ DISCOVERY_OAUTH_URL_ROOT }}'
+DISCOVERY_JWT_SECRET_KEY: '{{ DISCOVERY_SOCIAL_AUTH_EDX_OIDC_SECRET }}'
+DISCOVERY_JWT_DECODE_HANDLER: 'edx_rest_framework_extensions.utils.jwt_decode_handler',
+
+DISCOVERY_JWT_AUTH:
+  JWT_ALGORITHM: '{{ DISCOVERY_JWT_ALGORITHM }}'
+  JWT_AUDIENCE: '{{ DISCOVERY_JWT_AUDIENCE }}'
+  JWT_ISSUER: '{{ DISCOVERY_JWT_ISSUER }}'
+  JWT_SECRET_KEY: '{{ DISCOVERY_JWT_SECRET_KEY }}'
+  JWT_DECODE_HANDLER: '{{ DISCOVERY_JWT_DECODE_HANDLER }}'
+
 DISCOVERY_SERVICE_CONFIG:
   SECRET_KEY: '{{ DISCOVERY_SECRET_KEY }}'
   TIME_ZONE: '{{ DISCOVERY_TIME_ZONE }}'
@@ -88,6 +101,8 @@ DISCOVERY_SERVICE_CONFIG:
   SOCIAL_AUTH_EDX_OIDC_URL_ROOT: '{{ DISCOVERY_OAUTH_URL_ROOT }}'
   SOCIAL_AUTH_REDIRECT_IS_HTTPS: '{{ DISCOVERY_SOCIAL_AUTH_REDIRECT_IS_HTTPS }}'
 
+  JWT_AUTH: '{{ DISCOVERY_JWT_AUTH }}'
+
   STATIC_ROOT: "{{ COMMON_DATA_DIR }}/{{ discovery_service_name }}/staticfiles"
   # db config
   DATABASE_OPTIONS: