Skip to content
This repository was archived by the owner on Jun 23, 2023. It is now read-only.

Conversation

nsklikas
Copy link
Contributor

@nsklikas nsklikas commented Aug 4, 2021

This allows us to have pkce(essential) activated for only some clients

@nsklikas nsklikas requested review from peppelinux and rohe August 4, 2021 10:26
@peppelinux
Copy link
Member

It looks good, I Just want to ask to you to put a brief description of this feature in the docs

Probably this Is good Moment to review the general policy of oidc-op with pkce, before merging this

@nsklikas
Copy link
Contributor Author

nsklikas commented Aug 5, 2021

What is the right place to document this?

@peppelinux
Copy link
Member

https://github.com/IdentityPython/oidc-op/blob/master/docs/source/contents/conf.rst#add_on

What do you think to have a separate section for add_ons?

@nsklikas
Copy link
Contributor Author

nsklikas commented Aug 5, 2021

Sure

@nsklikas nsklikas force-pushed the pkce-per-client branch 2 times, most recently from 83554d2 to c0e361e Compare August 5, 2021 11:41
@nsklikas
Copy link
Contributor Author

nsklikas commented Aug 5, 2021

Do you think something like this https://github.com/nsklikas/oidc-op/blob/pkce-per-client/docs/source/contents/conf.rst#pkce ok?

@peppelinux
Copy link
Member

Yes, that's great!
I have to be honest, I'd wait some days before having a new roadmap for the next release, including all these precious PRs.

For now I'd like to have all the PR with some good contributions in the docs as well.
You made a great job, after these days of vacation we'll have a new release

if "pkce_essential" in client:
essential = client["pkce_essential"]
else:
essential = endpoint_context.args["pkce"]["essential"]
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

essential = endpoint_context.args["pkce"].get("essential", False)

@nsklikas how does it sounds to you?

Copy link
Contributor Author

@nsklikas nsklikas Aug 6, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not so important neither urgent, only if it sounds good to you.
Yes explicit is better than implicit but an absent value (boolan) could be False by default.
That's my tastes, not mandatory for this project!

@rohe
Copy link
Collaborator

rohe commented Aug 17, 2021

I guess the

essential = essential = endpoint_context.args["pkce"].get(

line is a typo ?
Shouldn't it be just

essential = endpoint_context.args["pkce"].get(

@nsklikas
Copy link
Contributor Author

Good catch.

@peppelinux
Copy link
Member

@rohe do we think that this could be merged as It Is or do we have to put something more in?

@rohe
Copy link
Collaborator

rohe commented Aug 19, 2021

I think we can go ahead with this as it is.

@peppelinux peppelinux force-pushed the develop branch 2 times, most recently from 406068c to 78cae68 Compare September 2, 2021 23:45
@peppelinux peppelinux merged commit 0be7aa4 into IdentityPython:develop Sep 2, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants