Skip to content

Commit

Permalink
Temporary fix to broken SAML auth
Browse files Browse the repository at this point in the history
Why these changes are being introduced:
For reasons that still aren't entirely clear, SAML auth isn't working in
prod only. This update uses a forked version of the python3-saml lib
with a minor edit that fixes the issue until we can fully understand and
resolve it.

How this addresses that need:
* Updates python3-saml package to a locally-maintained forked.
* Updates SAML settings to debug in all environments.
* Updates AWS signing to v4, which is required now that we use KMS key
  encryption for our S3 buckets.
* Updates dependencies.

Relevant ticket(s):
* https://mitlibraries.atlassian.net/browse/INFRA-361
  • Loading branch information
hakbailey committed Dec 21, 2022
1 parent 9ce23ea commit 859be37
Show file tree
Hide file tree
Showing 5 changed files with 214 additions and 190 deletions.
2 changes: 1 addition & 1 deletion Pipfile
Expand Up @@ -9,7 +9,7 @@ botocore = "*"
flask = "*"
flask-talisman = "*"
gunicorn = "*"
python3-saml = "*"
python3-saml = {editable = true, git = "https://github.com/hakbailey/python3-saml.git"}
pyyaml = "*"
requests = "*"
sentry-sdk = {extras = ["flask"],version = "*"}
Expand Down

0 comments on commit 859be37

Please sign in to comment.