collective / collective/pas.plugins.oidc

Adicionar opção para tolerância de horários

Open
#44 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
6
Forks
16
PR merge metrics
No merged PRs in 30d

Description

Quando os horários do servidor do plone e do servidor do keycloak estão diferentes em alguns segundos, acontece um erro de validação na biblioteca oic, no meu caso o erro foi "Issued in the future". E isso cria um loop no login.

Na biblioteca oic, há um atributo que define a tolerância de tempo para essa validação.

https://github.com/CZ-NIC/pyoidc/blob/6258daa6f9acd23dcd62fb2cc8d78bae16a04e3c/src/oic/oic/message.py#L774

Esse atributo skew.

Seria bom se na configuração do plugin houvesse esse campo skew para definir a tolerância de tempo para validação.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the plugin configuration and trace how it passes validation settings into pyoidc; the referenced entry point is src/oic/oic/message.py around line 774, where skew is handled. Done means the plugin exposes a skew setting and login validation tolerates the configured clock difference without entering the reported loop.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.