(WIP) enable microservice-based flow to replay AuthnRequest (requires wsgi_app in registered callback) #288
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
(requires wsgi_app in registered callback)
rhoerbe
force-pushed
the
rh_wkis3
branch
2 times, most recently
from
da3f4e7 to
5b83e97
Compare
(requires wsgi_app in registered callback)
|
After wading thru various plugins that might potentially be called in _run_bound_endpoint() I decided to add **kwargs to all methods with the (self, context [, ...]) signature, because it is not trivial to proof what could be called (except a few, suche as process()) The first commit contains of the PR contains the microservice redirecturl.py, for which this PR is used. It is deleted in the second PR to limit this PR to a single purpose. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The rationale for this change is a microservice that is replaying the authentication request to the IDP after receiving the response with a signaling attribute that requires some interaction (like profile completion or role selection. ADFS is not capable of implementing this in the login sequence.
The microservice stores the authnRequest. Once it receives the response from the external interaction, it returns wsgi_app.run(authnrequ_context) to replay the AuthnRequest.