Skip to content

Remove dependency on saml_idp instance variable#11246

Merged
Sgtpluck merged 2 commits intomainfrom
dmm/remove-matching-cert-code
Sep 17, 2024
Merged

Remove dependency on saml_idp instance variable#11246
Sgtpluck merged 2 commits intomainfrom
dmm/remove-matching-cert-code

Conversation

@Sgtpluck
Copy link
Contributor

changelog: Internal, Protocols, Removes dependency on service provider instance variable

🎫 Ticket

Link to the relevant ticket:
https://gitlab.login.gov/lg-people/Melba/backlog-fy24/-/issues/2 and
LG-4875

🛠 Summary of changes

This is the penultimate step to clear out this old ticket :)
The matching_cert method has been pulled into the request object, rather than the service_provider object. There's one more bit of cleanup to be done on the saml_idp to remove that instance variable, but since all the pieces are in place to remove the IdP's dependency on it, I thought I would do that first.

Updating the IdP code will possibly allow us to remove this ValidationError, which is catching the edge case we've seen in the past where a request that is signed will have an X509 Certificate element in the XML, with no actual certificate embedded in it.

changelog: Internal, Protocols, Removes dependency on service provider instance variable
requested_ial:,
request_signed:,
matching_cert_serial:,
matching_cert_serial: nil,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the default needed if it's still being assigned in the method call?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i think some tests were failing until i added this, let me double check. (if they do fail again, i can investigate a little to see if it's a setup issue/a better way to solve it)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

seems like it works! maybe i had hit a transient error or something

@Sgtpluck Sgtpluck merged commit 8566e6f into main Sep 17, 2024
@Sgtpluck Sgtpluck deleted the dmm/remove-matching-cert-code branch September 17, 2024 19:09
AShukla-GSA pushed a commit that referenced this pull request Sep 30, 2024
changelog: Internal, Protocols, Removes dependency on service provider instance variable
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants