Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release 10.0.0-alpha.6 -- update sildisco module for SSP 2 #260

Merged
merged 36 commits into from
Jul 18, 2024
Merged

Conversation

briskt
Copy link
Contributor

@briskt briskt commented Jul 17, 2024

Changed

  • Re-enabled sildisco for IdP discovery.
  • Fixed SP name display on sildisco IdP selection page.
  • Use entityDisplayName Twig filter for displaying the IdP and SP names.
  • Updated test metadata to include entityid in every entry, and make name an array.
  • Patch the standard SP AuthSource to modify behavior when multiple IdPs are available for an SP.
    • When more than one IdP is available, always present the discovery page. Standard behavior is to proceed using an existing IdP session if possible.
    • When re-authentication is required, always present the discovery page. Standard behavior is to let the user choose whether to cancel or continue.

Removed

  • Removed source files copied from SimpleSAMLphp that are no longer used.
  • Removed leftover dictionary files from pre-SSP2
  • Removed actions-services.yml
  • Removed patch from run.sh
  • Removed "beta test" feature. We do not use this in staging or production.

Fixed

  • Fixed the SingleLogoutService on the test IdPs to use the standard saml2-logout.php since it no longer needs to be customized.
  • Added use statements to import classes
  • Removed unnecessary use statements

briskt and others added 30 commits July 9, 2024 14:17
update sildisco module for SimpleSAMLphp 2
From the diff man page: "For proper operation, patch typically needs at least two lines of context"
Copy link

Copy link
Contributor

@hobbitronics hobbitronics left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can't say I've reviewed all of the code but on the basis that someone has it should be ok. On the other hand you might wan't someone else to tick the box.

@briskt
Copy link
Contributor Author

briskt commented Jul 18, 2024

Can't say I've reviewed all of the code but on the basis that someone has it should be ok. On the other hand you might wan't someone else to tick the box.

Thanks. Previous reviews should be enough, but if other people are willing and available, I wouldn't turn away more input (before or after merge).

@briskt briskt merged commit 7046663 into main Jul 18, 2024
4 checks passed
Comment on lines +62 to +68
if (!empty($spEntityId)) {
$idpList = DiscoUtils::getReducedIdpList(
$idpList,
$this->getMetadataPath(),
$spEntityId
);
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If the SP Entity ID is empty, does this mean that the IDP List used might now include more entries than it should (since it won't be reduced)?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes. Do you think it would be better to throw an exception instead?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think so. It may be that we try it and learn that's not what we want, but I'd rather err on the side of failing loudly rather than silently.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

4 participants