Skip to content

Fix SSO Login when JWT_PRIVATE_SIGNING_JWK is not set - #20160

Merged
nasthagiri merged 1 commit into
open-release/ironwood.masterfrom
arch/fix-sso-when-no-jwts
Apr 9, 2019
Merged

Fix SSO Login when JWT_PRIVATE_SIGNING_JWK is not set#20160
nasthagiri merged 1 commit into
open-release/ironwood.masterfrom
arch/fix-sso-when-no-jwts

Conversation

@nasthagiri

@nasthagiri nasthagiri commented Apr 5, 2019

Copy link
Copy Markdown
Contributor

This PR fixes the Ironwood workaround introduced in https://github.com/edx/edx-platform/pull/19674.

In particular, the earlier PR avoids the need for Open edX Ironwood installations to set up their Private JWKs. It does this by bypassing the creation of JWT Cookies when its required key configuration is missing. However, this bypass check was also needed in an additional place, which this PR fixes.

@nasthagiri
nasthagiri force-pushed the arch/fix-sso-when-no-jwts branch from 1b9ea30 to 56cfbd0 Compare April 5, 2019 02:17
@nedbat

nedbat commented Apr 5, 2019

Copy link
Copy Markdown
Contributor

Should these commits be on master?

@nasthagiri

Copy link
Copy Markdown
Contributor Author

@nedbat um.. Was gonna ask you this morning. Which ironwood branch should this PR be against?

@nasthagiri
nasthagiri force-pushed the arch/fix-sso-when-no-jwts branch from 32ae2a7 to 16ae603 Compare April 5, 2019 13:34
@nasthagiri
nasthagiri requested a review from nedbat April 6, 2019 19:19
@nasthagiri

Copy link
Copy Markdown
Contributor Author

@nedbat Can you take a look at the failing bokchoy tests? Are there Ironwood configuration settings for Studio Documentation links that need to be updated?

@nasthagiri

Copy link
Copy Markdown
Contributor Author

@nasthagiri
nasthagiri force-pushed the arch/fix-sso-when-no-jwts branch from 16ae603 to 71b47af Compare April 8, 2019 02:22
@edx-status-bot

Copy link
Copy Markdown

Your PR has finished running tests. The following contexts failed:

  • jenkins/ironwood/bokchoy

@nasthagiri

Copy link
Copy Markdown
Contributor Author

@nedbat The current Bokchoy failures are related to Studio Help Navigation Links. It seems the tests don't pass when the RELEASE_LINE is set to ironwood.

I recommend we move forward with merging this change. We can address the unrelated Bokchoy tests at a later time.

Can you please review and confirm that we should merge into ironwood.master? Thanks.

@nedbat

nedbat commented Apr 9, 2019

Copy link
Copy Markdown
Contributor

@nasthagiri Yes, the bokchoy failures are not an issue (though I added skips specifically so these failures wouldn't happen, not sure why the tests are still running...)

@nedbat

nedbat commented Apr 9, 2019

Copy link
Copy Markdown
Contributor

Oh: you didn't make this commit on the tip of ironwood. My test fixes are after the commit you based this on. No worries.

@nasthagiri
nasthagiri merged commit 8daa162 into open-release/ironwood.master Apr 9, 2019
@nasthagiri
nasthagiri deleted the arch/fix-sso-when-no-jwts branch April 9, 2019 19:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants