Add missing vars/secrets to CO tofu (#159)

* Add missing vars/secrets to CO tofu

* Update syntax for oidc step up secret arns

* Update variables.tf with authorization endpoint

* Update main.tf to reuse non-stepup endpoints

Author: ShaynaCummings

tofu/config/dev-co/main.tf

@@ -111,15 +111,22 @@ module "app" {
 
   state_api_environment_variables = {
     "Oidc__DiscoveryEndpoint"                          = var.oidc_discovery_endpoint
+    "Oidc__AuthorizationEndpoint"                      = var.oidc_authorization_endpoint
     "Oidc__CallbackRedirectUri"                        = "https://${var.domain}/callback"
     "Oidc__LanguageParam"                              = "en"
+    "Oidc__StepUp__DiscoveryEndpoint"                  = var.oidc_discovery_endpoint
+    "Oidc__StepUp__AuthorizationEndpoint"              = var.oidc_authorization_endpoint
+    "Oidc__StepUp__CallbackRedirectUri"                = "https://${var.domain}/callback"
     "StateHouseholdId__PreferredHouseholdIdTypes__0"   = "Phone"
   }
 
   state_api_environment_secrets = {
     "Cbms__ClientId"                = "${module.state_secrets.secrets["cbms"].secret_arn}:client_id"
     "Cbms__ClientSecret"            = "${module.state_secrets.secrets["cbms"].secret_arn}:client_secret"
     "Oidc__ClientId"                = "${module.state_secrets.secrets["oidc"].secret_arn}:client_id"
+    "Oidc__ClientSecret"            = "${module.state_secrets.secrets["oidc"].secret_arn}:client_secret"
+    "Oidc__StepUp__ClientId"        = "${module.state_secrets.secrets["oidc"].secret_arn}:step_up_client_id"
+    "Oidc__StepUp__ClientSecret"    = "${module.state_secrets.secrets["oidc"].secret_arn}:step_up_client_secret"
     "Oidc__CompleteLoginSigningKey" = "${module.state_secrets.secrets["oidc"].secret_arn}:complete_login_signing_key"
   }
 

tofu/config/dev-co/variables.tf

@@ -15,6 +15,18 @@ variable "image_tag" {
   default     = "latest"
 }
 
+variable "oidc_discovery_endpoint" {
+  type        = string
+  description = "MyColorado OIDC discovery endpoint URL."
+  default     = "https://auth.pingone.com/e8e64475-39e1-43de-964b-3bc2e835a2f5/as/.well-known/openid-configuration"
+}
+
+variable "oidc_authorization_endpoint" {
+  type        = string
+  description = "MyColorado OIDC authorization endpoint URL."
+  default     = "https://auth.pingone.com/e8e64475-39e1-43de-964b-3bc2e835a2f5/as/authorize"
+}
+
 variable "private_subnets" {
   type        = list(string)
   description = "List of private subnet CIDR blocks."
@@ -46,9 +58,3 @@ variable "vpc_cidr" {
   type        = string
   description = "IPv4 CIDR block for the VPC."
 }
-
-variable "oidc_discovery_endpoint" {
-  type        = string
-  description = "MyColorado OIDC discovery endpoint URL."
-  default     = "https://auth.pingone.com/e8e64475-39e1-43de-964b-3bc2e835a2f5/as/.well-known/openid-configuration"
-}