Add asymmetric key JWT variables for course-discovery and LMS

playbooks/roles/discovery/defaults/main.yml

@@ -68,6 +68,24 @@ DISCOVERY_SOCIAL_AUTH_EDX_OIDC_KEY : 'discovery-key'
 DISCOVERY_SOCIAL_AUTH_EDX_OIDC_SECRET : 'discovery-secret'
 DISCOVERY_SOCIAL_AUTH_REDIRECT_IS_HTTPS: false
 
+# This should be the same key as the EDXAPP_JWT_PUBLIC_KEY
+DISCOVERY_JWT_SECRET_KEY: 'replace-with-lms-rsa-public-key'
+DISCOVERY_JWT_ALGORITHM: 'RS512'
+DISCOVERY_JWT_VERIFY_EXPIRATION: true
+DISCOVERY_JWT_DECODE_HANDLER: 'edx_rest_framework_extensions.utils.jwt_decode_handler'
+# This should be the same as the EDXAPP_LMS_ISSUER
+DISCOVERY_JWT_ISSUER: DISCOVERY_OAUTH_URL_ROOT
+DISCOVERY_JWT_AUDIENCE: 'course-discovery'
+
+DISCOVERY_JWT_AUTH:
+    JWT_SECRET_KEY: '{{ DISCOVERY_JWT_SECRET_KEY }}'
+    JWT_ALGORITHM: '{{ DISCOVERY_JWT_ALGORITHM }}'
+    JWT_VERIFY_EXPIRATION: '{{ DISCOVERY_JWT_VERIFY_EXPIRATION }}'
+    JWT_LEEWAY: 1
+    JWT_DECODE_HANDLER: '{{ DISCOVERY_JWT_DECODE_HANDLER }}'
+    JWT_ISSUER: '{{ DISCOVERY_JWT_ISSUER }}'
+    JWT_ISSUER_AUDIENCE: '{{ DISCOVERY_JWT_AUDIENCE }}'
+
 DISCOVERY_PLATFORM_NAME: 'Your Platform Name Here'
 
 DISCOVERY_LMS_ROOT_URL: '{{ EDXAPP_LMS_ROOT_URL | default("http://127.0.0.1:8000") }}'
@@ -88,6 +106,8 @@ DISCOVERY_SERVICE_CONFIG:
   SOCIAL_AUTH_EDX_OIDC_URL_ROOT: '{{ DISCOVERY_OAUTH_URL_ROOT }}'
   SOCIAL_AUTH_REDIRECT_IS_HTTPS: '{{ DISCOVERY_SOCIAL_AUTH_REDIRECT_IS_HTTPS }}'
 
+  JWT_AUTH: '{{ DISCOVERY_JWT_AUTH }}'
+
   STATIC_ROOT: "{{ COMMON_DATA_DIR }}/{{ discovery_service_name }}/staticfiles"
   # db config
   DATABASE_OPTIONS:

playbooks/roles/edxapp/defaults/main.yml

@@ -570,6 +570,10 @@ EDXAPP_COMPREHENSIVE_THEME_VERSION: ""
 EDXAPP_SOCIAL_AUTH_SAML_SP_PRIVATE_KEY: ''
 EDXAPP_SOCIAL_AUTH_SAML_SP_PUBLIC_CERT: ''
 
+# RSA KEY PAIR for JWT signing/validation
+EDXAPP_JWT_PUBLIC_KEY: ''
+EDXAPP_JWT_PRIVATE_KEY: ''
+
 # Session cookie setting
 # Only set this to true for client side profiling, never for production
 EDXAPP_SESSION_SAVE_EVERY_REQUEST: false
@@ -900,6 +904,8 @@ lms_auth_config:
                 render_template: 'edxmako.shortcuts.render_to_string'
   PROCTORING_BACKEND_PROVIDER: "{{ EDXAPP_PROCTORING_BACKEND_PROVIDER }}"
   SOCIAL_AUTH_OAUTH_SECRETS: "{{ EDXAPP_SOCIAL_AUTH_OAUTH_SECRETS }}"
+  JWT_PUBLIC_KEY: "{{ EDXAPP_JWT_PUBLIC_KEY }}"
+  JWT_PRIVATE_KEY: "{{ EDXAPP_JWT_PRIVATE_KEY }}"
 
 
 lms_env_config: