Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WIP] sso-users #7

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

[WIP] sso-users #7

wants to merge 2 commits into from

Conversation

chakl
Copy link
Collaborator

@chakl chakl commented Apr 14, 2023

This is a preview of SAML SSO changes to support multiple auth realms.

While there, reduce code surface inside privileged system:as-user() calls.

@@ -87,8 +87,8 @@ declare function exsaml:info() {
: @param relaystate this is the path component of the resource that the user
: initially requested, so that she gets sent there after SAML auth.
:)
declare function exsaml:build-authnreq-redir-url($relaystate as xs:string) {
let $log := exsaml:log("info", "building SAML auth request redir-url; relaystate: " || $relaystate)
declare function exsaml:build-authnreq-redir-url($relayurl as xs:string, $realm as xs:string) {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a breaking change for any app that relies on exsaml:build-authnreq-redir-url#1 (the original arity-1 version of this function). For backwards compatibility, would it be possible to retain the arity-1 version of this function? If that's not possible, this PR would to be released in a new major version of the package.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@joewiz I was planning to do exactly that, for backwards compatibility

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great! Hopefully that will allow my existing apps that use existdb-saml (e.g., hsa, guides, hma) to continue working without modification. Of course, if there's an important breaking change, we can always change the other apps.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants