🔥 Remove oidc_exempt_urls from config model

this field was never actually used, and it does not make sense to make settings that refer to Django stuff (URL patterns in this case) manually configurable instead of programmatically. It caused issues in Open Forms (#4435) where it required manual action from admins if it was kept as a model field.

Author: stevenbal

docs/quickstart.rst

@@ -147,7 +147,6 @@ and the following settings from ``mozilla-django-oidc`` for OpenID Connect can b
 - ``OIDC_RP_IDP_SIGN_KEY``
 - ``OIDC_USE_NONCE``
 - ``OIDC_STATE_SIZE``
-- ``OIDC_EXEMPT_URLS``
 
 In case no value is provided for one of these variables, the default from ``mozilla-django-oidc``
 will be used (if there is one). A detailed description of all settings can be found in the `mozilla-django-oidc settings documentation`_.

mozilla_django_oidc_db/admin.py

@@ -70,7 +70,6 @@ class OpenIDConnectConfigAdmin(SingletonModelAdmin):
                     "oidc_use_nonce",
                     "oidc_nonce_size",
                     "oidc_state_size",
-                    "oidc_exempt_urls",
                     "userinfo_claims_source",
                 ),
                 "classes": [

mozilla_django_oidc_db/migrations/0004_remove_openidconnectconfig_oidc_exempt_urls.py

@@ -0,0 +1,20 @@
+# Generated by Django 4.2.11 on 2024-07-01 15:15
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        (
+            "mozilla_django_oidc_db",
+            "0003_openidconnectconfig_oidc_keycloak_idp_hint_and_more",
+        ),
+    ]
+
+    operations = [
+        migrations.RemoveField(
+            model_name="openidconnectconfig",
+            name="oidc_exempt_urls",
+        ),
+    ]

mozilla_django_oidc_db/models.py

@@ -160,17 +160,6 @@ class OpenIDConnectConfigBase(SingletonModel):
         ),
         default=32,
     )
-    oidc_exempt_urls = ArrayField(
-        verbose_name=_("URLs exempt from session renewal"),
-        base_field=models.CharField(_("Exempt URL"), max_length=1000),
-        default=list,
-        blank=True,
-        help_text=_(
-            "This is a list of absolute url paths, regular expressions for url paths, "
-            "or Django view names. This plus the mozilla-django-oidc urls are exempted "
-            "from the session renewal by the SessionRefresh middleware."
-        ),
-    )
 
     # Keycloak specific config
     oidc_keycloak_idp_hint = models.CharField(