Skip to content

LG-12266: Stop reading from sp_session[:phishing_resistant_requested]#10121

Merged
solipet merged 3 commits intomainfrom
dprice-lg-12266-stop-reading-sp_session-phishing_resistant_requested
Feb 22, 2024
Merged

LG-12266: Stop reading from sp_session[:phishing_resistant_requested]#10121
solipet merged 3 commits intomainfrom
dprice-lg-12266-stop-reading-sp_session-phishing_resistant_requested

Conversation

@solipet
Copy link
Contributor

@solipet solipet commented Feb 20, 2024

🎫 Ticket

Link to the relevant ticket:
LG-12266

🛠 Summary of changes

In a previous commit the resolved_authn_context_result was introduced to return a Vot::Parser::Result object that described the requirements for the current SP request considering SP default options. This is intended to be used to replace the keys in the sp_session that serve this purpose including the phishing_resistant_requested key.

This commit replaces places where the sp_session[:phishing_resistant_requested] value is read with new reads to the resolved_authn_context_result.

@solipet solipet requested a review from a team February 20, 2024 22:51
In a previous commit the `resolved_authn_context_result` was introduced to return a `Vot::Parser::Result` object that described the requirements for the current SP request considering SP default options. This is intended to be used to replace the keys in the `sp_session` that serve this purpose including the `phishing_resistant_requested` key.

This commit replaces places where the `sp_session[:phishing_resistant_requested]` value is read with new reads to the `resolved_authn_context_result`.

[skip changelog]
@solipet solipet force-pushed the dprice-lg-12266-stop-reading-sp_session-phishing_resistant_requested branch from 99653fc to 012776f Compare February 22, 2024 18:49
@solipet solipet merged commit e756d99 into main Feb 22, 2024
@solipet solipet deleted the dprice-lg-12266-stop-reading-sp_session-phishing_resistant_requested branch February 22, 2024 19:15
jmhooper pushed a commit that referenced this pull request Feb 26, 2024
…hing_resistant_requested] and started using the result from the AuthnContextResolver instead.

This change follows up by removing writes to the phishing_resistant_requested property in the SP session. This should not be merged until the change to stop reading is fully merged and deployed.

[skip changelog]
jmhooper pushed a commit that referenced this pull request Feb 26, 2024
…hing_resistant_requested] and started using the result from the AuthnContextResolver instead. (#10140)

This change follows up by removing writes to the phishing_resistant_requested property in the SP session. This should not be merged until the change to stop reading is fully merged and deployed.

[skip changelog]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants