Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Blocked] Return correct AAL value in user_info JWT #11027

Draft
wants to merge 6 commits into
base: main
Choose a base branch
from
Draft

[Blocked] Return correct AAL value in user_info JWT #11027

wants to merge 6 commits into from

Commits on Sep 16, 2024

  1. Return correct AAL value in user_info JWT 

    **Why**

* When no AAL ACR value is selected and the SP requires a higher default
  AAL level or the request demands identity proofing, the user_info
  block should return the correct AAL ACR value instead of the default
  AAL ACR
* Resolves https://gitlab.login.gov/lg-people/lg-people-appdev/Melba/backlog-fy24/-/issues/55

**How**
* Map the ServiceProvider.default_aal value to a known ACR value using
  a new method (AuthnContextResolver.asserted_aal_value)
* Ensure the new asserted AAL ACR value is used as a fallback in the
  OpenidConnectUserInfoPresenter and OpenidConnectAuthorizeForm so that
  the JWT built by IdTokenBuilder is correct and doesn't overwrite
  pre-existing data.

changelog: Bug Fixes, OIDC Authentication, Return correct AAL in JWT
    @lmgeorge
    lmgeorge committed Sep 16, 2024
    Configuration menu
    Copy the full SHA
    d88e9ef View commit details
    Browse the repository at this point in the history

  2. Simplify asserted_ial logic

    @lmgeorge
    lmgeorge committed Sep 16, 2024
    Configuration menu
    Copy the full SHA
    e4d53ba View commit details
    Browse the repository at this point in the history

  3. Fix incorrect method call on AuthnContextResolver

    @lmgeorge
    lmgeorge committed Sep 16, 2024
    Configuration menu
    Copy the full SHA
    43e699c View commit details
    Browse the repository at this point in the history

  4. wip: centralizing IAL/AAL handling and sorting

    @lmgeorge
    lmgeorge committed Sep 16, 2024
    Configuration menu
    Copy the full SHA
    ad4db92 View commit details
    Browse the repository at this point in the history

  5. wip: OpenidConnectAuthorizeForm specs passing

    @lmgeorge
    lmgeorge committed Sep 16, 2024
    Configuration menu
    Copy the full SHA
    106c506 View commit details
    Browse the repository at this point in the history

  6. wip: fixed OpenidConnectAuthorizeForm resolution of :identity_proofin… 

    …g feature
    @lmgeorge
    lmgeorge committed Sep 16, 2024
    Configuration menu
    Copy the full SHA
    3d0070f View commit details
    Browse the repository at this point in the history