Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade omniauth, omniauth-cas, and omniauth-rails_csrf_protection gems #192

Closed
7 tasks done
sandbergja opened this issue Jun 7, 2024 · 0 comments
Closed
7 tasks done
Assignees

Comments

@sandbergja
Copy link
Member

sandbergja commented Jun 7, 2024

What maintenance needs to be done

  • Upgrade omniauth to 2.x, omniauth-cas to 3.x, and omniauth-rails_csrf_protection
  • Confirm that authentication still works locally, in staging, and in prod
  • Special care should be taken with Lux applications (indicated by 🧁), since some of them they are currently linking to GET requests for /auth/cas, when omniauth 2 wants these to be POST requests for security reasons.

Applications

christinach added a commit to pulibrary/DSS that referenced this issue Jun 18, 2024
sandbergja added a commit to pulibrary/DSS that referenced this issue Jun 20, 2024
* Activate lux menu bar method post
Add method post in the shared login partial

Co-authored-by: Jane Sandberg <[email protected]>

* Update omniauth-cas related to pulibrary/dacs_handbook#192

Co-authored-by: Jane Sandberg <[email protected]>

---------

Co-authored-by: Jane Sandberg <[email protected]>
christinach added a commit to pulibrary/lockers_and_study_spaces that referenced this issue Jun 20, 2024
sandbergja added a commit to pulibrary/lockers_and_study_spaces that referenced this issue Jun 21, 2024
* Bundle update omniauth related to pulibrary/dacs_handbook#192

* add omniauth
update omniauth-rails_csrf_protection

Co-authored-by: Jane Sandberg <[email protected]>

---------

Co-authored-by: Jane Sandberg <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants