italia / italia/spid-ruby

Validare index di un attribute consuming service fornito al login

Open
#40 0 comments 0 reactions 0 assignees View on GitHub
enhancement good first issue road-to-1.0
Dominant language
Ruby
Stars
8
Forks
6
PR merge metrics
No merged PRs in 30d

Description

Al momento, durante la generazione dell'url per instaurare una nuova SSO, se si specifica un valore di `attribute_service_index` il sistema non genera alcun errore, ma verrà inoltrata al Identity Provider un valore non associato a nessuno degli `AttributeConsumingService` elencati nel metadata.

Fare in modo che, in questa circostanza, sia la gemma stessa a generare un errore prima di inoltrare una `AuthnRequest` sbagliata

Contributor guide

No contributing guide indexed for this repository

Research direction

Locate the login URL generation and AuthnRequest construction, then trace how attribute_service_index is handled against the AttributeConsumingService entries in the metadata. Verify the behavior for an index that is not present and for a valid index. Done means the gem raises an error before sending an invalid AuthnRequest while preserving valid requests.

Written by the indexing model from the issue text.

Assessment

Tech stack
ruby
Domain
authentication
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.