Changing to non encrypted nameID format

AaltoRSE · Feb 12, 2024 · e71ffce · e71ffce
1 parent a6bba25
commit e71ffce
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/.gitignore b/.gitignore
@@ -196,3 +196,5 @@ app/saml/saml_data/settings.json
 # dev databases
 mongodb/**/*
 data/**/*
+
+keyfile.key
diff --git a/app/saml/saml_data/advanced_settings.json b/app/saml/saml_data/advanced_settings.json
@@ -8,7 +8,7 @@
         "wantMessagesSigned": true,
         "wantAssertionsSigned": true,
         "wantNameId" : true,
-        "wantNameIdEncrypted": true,
+        "wantNameIdEncrypted": false,
         "wantAssertionsEncrypted": true,
         "allowSingleLabelDomains": false,
         "signatureAlgorithm": "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256",

diff --git a/app/saml/saml_router.py b/app/saml/saml_router.py
@@ -57,8 +57,7 @@ async def saml_callback(request: Request):
         else:
             sessionData = {}
             sessionData["samlUserdata"] = auth.get_attributes()
-            logger.info(auth.get_nameid())
-            sessionData["samlNameId"] = decrypt_name_id(auth.get_nameid())
+            sessionData["samlNameId"] = auth.get_nameid()
             sessionData["samlNameIdFormat"] = auth.get_nameid_format()
             sessionData["samlNameIdNameQualifier"] = auth.get_nameid_nq()
             sessionData["samlNameIdSPNameQualifier"] = auth.get_nameid_spnq()