GluuFederation / GluuFederation/oxAuth

feat: on ACR change keep authentication context if custom script allows to do this

Open
#1,743 0 comments 0 reactions 2 assignees View on GitHub

@yurem is already working on this.

Since Oct 24, 2022.

Dominant language
Java
Stars
425
Forks
145
PR merge metrics
No merged PRs in 30d

Description

Currently on ACR change when client force to user re-authentication with script which has bigger priory server clean authentication context. We can keep it in some case to allow new ACR to reuse this data. For example, to skip user/pwd authentication step.

In order to to this we need to add new method to authentication script:

    boolean keepContextOnNewRequest<String, SimpleCustomProperty> configurationAttributes, Map<String, String[]> requestParameters, Map<String, String> sessionIdAttributess, String currentAcr, String newAcr);

Server should call this method only if script getApiVersion() > 14 in order to avoid issues with existing scripts which not have this method.

If keepContextOnRequest returns True server should mark session context as unauthenticated and call authenticator to resume flow. Inside this method script can call identity.getWorkingParameters() to reconfigure authentication context. For example clean data for all steps except user/pwd authentication steps. Also script can modify sessionIdAttributess to start authentication from specific step.
In other case server should do same flow which it has now.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.