From 2780ae78f78e659dee43884da8fec069f0fb14dc Mon Sep 17 00:00:00 2001
From: Maikel Linke <maikel@email.org.au>
Date: Wed, 24 Sep 2025 15:41:15 +1000
Subject: [PATCH] Add CQCM production servers

---
 .../app/controllers/dfc_provider/platforms_controller.rb   | 1 +
 engines/dfc_provider/app/services/api_user.rb              | 1 +
 engines/dfc_provider/app/services/authorization_control.rb | 7 +++++++
 engines/dfc_provider/app/services/proxy_notifier.rb        | 2 +-
 lib/open_food_network/feature_toggle.rb                    | 4 +++-
 5 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/engines/dfc_provider/app/controllers/dfc_provider/platforms_controller.rb b/engines/dfc_provider/app/controllers/dfc_provider/platforms_controller.rb
index 26ec1ebe3c..770cf07bfc 100644
--- a/engines/dfc_provider/app/controllers/dfc_provider/platforms_controller.rb
+++ b/engines/dfc_provider/app/controllers/dfc_provider/platforms_controller.rb
@@ -7,6 +7,7 @@ module DfcProvider
     PLATFORM_IDS = {
       'cqcm-dev' => "https://api.proxy-dev.cqcm.startinblox.com/profile",
       'cqcm-stg' => "https://api.proxy-stg.cqcm.startinblox.com/profile",
+      'cqcm' => "https://carte.cqcm.coop/profile",
     }.freeze
 
     prepend_before_action :move_authenticity_token
diff --git a/engines/dfc_provider/app/services/api_user.rb b/engines/dfc_provider/app/services/api_user.rb
index ea054ce99c..987f328c2e 100644
--- a/engines/dfc_provider/app/services/api_user.rb
+++ b/engines/dfc_provider/app/services/api_user.rb
@@ -5,6 +5,7 @@ class ApiUser
   CLIENT_MAP = {
     "https://waterlooregionfood.ca/portal/profile" => "cqcm-dev",
     "https://api.proxy-stg.cqcm.startinblox.com/profile" => "cqcm-stg",
+    "https://carte.cqcm.coop/profile" => "cqcm",
   }.freeze
 
   def self.from_client_id(client_id)
diff --git a/engines/dfc_provider/app/services/authorization_control.rb b/engines/dfc_provider/app/services/authorization_control.rb
index ffcef33982..582edcff0d 100644
--- a/engines/dfc_provider/app/services/authorization_control.rb
+++ b/engines/dfc_provider/app/services/authorization_control.rb
@@ -18,6 +18,13 @@ class AuthorizationControl
       MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtvdb3BdHoLnNeMLaWd7nugPwdRAJJpdSySTtttEQY2/v1Q3byJ/kReSNGrUNkPVkOeDN3milgN5Apz+sNCwbtzOCulyFMmvuIOZFBqz5tcgwjZinSwpGBXpn6ehXyCET2LlcfLYAPA9axtaNg9wBLIHoxIPWpa2LcZstogyZY/yKUZXQTDqM5B5TyUkPN89xHFdq8SQuXPasbpYl7mGhZHkTDHiKZ9VK7K5tqsEZTD9dCuTGMKsthbOrlDnc9bAJ3PyKLRdib21Y1GGlTozo4Y/1q448E/DFp5rVC6jG6JFnsEnP0WVn+6qz7yxI7IfUU2YSAGgtGYaQkWtEfED0QIDAQAB
       -----END PUBLIC KEY-----
     KEY
+
+    # Copied from: https:///authentification.cqcm.coop/realms/cqcm
+    "https:///authentification.cqcm.coop/realms/cqcm" => <<~KEY,
+      -----BEGIN PUBLIC KEY-----
+      MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz7dK3xQAWL+u++E/64T1OHEvnFrZRLzgCmw0leib3JL/XbaE4Jbd3fs2+zc3+dCwvCuLEKKO9Hc9wg79ifjtMKFfZDE1Ba+qhw7J9tYnu7TBtaxKuWUCdtwuultEdW+NFndaUvhD/TdyjDkRiO98mgvUbm2A3q/zyDmoUpR2IEfevkMSz8MnxUo1bDTJIyoYoKwnbToI1E9RVx2uYsYKk24Pfd+r6oTbi7TxA6Ia4EiREFki2gNIAdp66IqF0Gxyd+nGlkIbQGrW+9xynU4ar3ZNq/P8EZFdO57AdEvC3ZAzpTvOVcQ0cQ4XbRSYWQHyZ8jnjggpeddTGSqVlgx1wIDAQAB
+      -----END PUBLIC KEY-----
+    KEY
   }.freeze
 
   def self.public_key(token)
diff --git a/engines/dfc_provider/app/services/proxy_notifier.rb b/engines/dfc_provider/app/services/proxy_notifier.rb
index 7da33718df..0e4b73b4bd 100644
--- a/engines/dfc_provider/app/services/proxy_notifier.rb
+++ b/engines/dfc_provider/app/services/proxy_notifier.rb
@@ -8,7 +8,7 @@ class ProxyNotifier
   TOKEN_ENDPOINTS = {
     'https://api.proxy-dev.cqcm.startinblox.com/profile' => "https://kc.cqcm.startinblox.com/realms/startinblox/protocol/openid-connect/token",
     'https://api.proxy-stg.cqcm.startinblox.com/profile' => "https://kc.cqcm.startinblox.com/realms/startinblox/protocol/openid-connect/token",
-    'https://api.proxy.cqcm.startinblox.com/profile' => "https://authentification.cqcm.coop/realms/cqcm/protocol/openid-connect/token",
+    'https://carte.cqcm.coop/profile' => "https://authentification.cqcm.coop/realms/cqcm/protocol/openid-connect/token",
 
   }.freeze
 
diff --git a/lib/open_food_network/feature_toggle.rb b/lib/open_food_network/feature_toggle.rb
index 9976f3e1fd..3c5b5ed9d0 100644
--- a/lib/open_food_network/feature_toggle.rb
+++ b/lib/open_food_network/feature_toggle.rb
@@ -66,7 +66,9 @@ module OpenFoodNetwork
       DESC
       "cqcm-stg" => <<~DESC,
         Show DFC Permissions interface to share data with CQCM staging platform.
-        After approval, enteprises should apppear on https://cqcm-map.startinblox.com/.
+      DESC
+      "cqcm" => <<~DESC,
+        Show DFC Permissions interface to share data with CQCM.
       DESC
     }.merge(conditional_features).freeze;