Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for individual sessions options under social auth #188

Closed
NickolausDS opened this issue Jan 17, 2023 · 0 comments
Closed

Add support for individual sessions options under social auth #188

NickolausDS opened this issue Jan 17, 2023 · 0 comments
Labels
Breaking Change This change is backward incompatible and will require users to edit their portals

Comments

@NickolausDS
Copy link
Collaborator

NickolausDS commented Jan 17, 2023

Currently, using Globus Sessions changes the behavior of user ids and exposes the SOCIAL_AUTH_GLOBUS_ALLOWED_GROUPS variable. Using Sessions in DGPF shouldn't change the behavior of user ids, and admins should be able to set individual options in Globus Sessions. Ideally, this would mirror options in sessions like so:

  • SOCIAL_AUTH_GLOBUS_SESSION_MESSAGE -- string
  • SOCIAL_AUTH_GLOBUS_SESSION_REQUIRED_IDENTITIES -- List of user UUIDs
  • SOCIAL_AUTH_GLOBUS_SESSION_REQUIRED_POLICIES -- List of policy UUIDs
  • SOCIAL_AUTH_GLOBUS_SESSION_REQUIRED_MFA -- boolean
  • SOCIAL_AUTH_GLOBUS_SESSION_REQUIRED_SINGLE_DOMAIN -- string

This would include the following breaking changes:

  • SOCIAL_AUTH_GLOBUS_SESSIONS option would be removed
  • User ids in social auth would no longer change
@NickolausDS NickolausDS added the Breaking Change This change is backward incompatible and will require users to edit their portals label Jan 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Breaking Change This change is backward incompatible and will require users to edit their portals
Projects
None yet
Development

No branches or pull requests

1 participant