Allow altering authn contexts

Created on 7 September 2023, 10 months ago

Some SAML providers - like the Belgian government - have their own authn contexts, so we should be able to add those.

✨ Feature request
Status

Needs work

Version

4.0

Component

Code

Created by

πŸ‡§πŸ‡ͺBelgium Matthijs

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • Issue created by @Matthijs
  • @matthijs opened merge request.
  • Status changed to Needs review 10 months ago
  • πŸ‡§πŸ‡ͺBelgium Matthijs

    This MR changes the return of saml_sp_authn_context_class_refs() and adds an alter hook.

  • Status changed to Needs work 10 months ago
  • πŸ‡ΊπŸ‡ΈUnited States jproctor

    This is a great improvement but it changes the API for an existing public method.

    Can we make it backwards compatible and add a deprecation warning? I don’t see an easy way to do that other than changing the function name (remove class? spell out authentication or references?) but you may have another idea.

  • πŸ‡§πŸ‡ͺBelgium Matthijs

    I personally don't think changing the functions outcome is a problem since it's not a class method, but if you do I suggest to move my changes to a new function, use that everywhere and adjust the existing function to call the new one and return a value in the same format as before.
    WDYT?

Production build 0.69.0 2024