[JIRA] (IDP-1920) Attribute release activation condition is SAML-specific.

Scott Cantor (Jira) jira at shibboleth.atlassian.net
Mon Mar 14 14:32:03 UTC 2022


Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on IDP-1920 ( https://shibboleth.atlassian.net/browse/IDP-1920?atlOrigin=eyJpIjoiMWMyNjc3MTEyMGQyNGVhMzlhNGQ4Njk4NTM2NzRmNDEiLCJwIjoiaiJ9 )

Re: Attribute release activation condition is SAML-specific. ( https://shibboleth.atlassian.net/browse/IDP-1920?atlOrigin=eyJpIjoiMWMyNjc3MTEyMGQyNGVhMzlhNGQ4Njk4NTM2NzRmNDEiLCJwIjoiaiJ9 )

The user is prompted though, prior to the back-channel step happening (and if not, there’s no consent record to find). If that code filters out all but the attributes consented to in the record (or anything not subject to consent), then I don’t think the condition is necessary.

There are holes in all of this because of per-request consent not working (or client-side storage for that matter) but I think they’re throwing the baby out with the bathwater at this point.

( https://shibboleth.atlassian.net/browse/IDP-1920#add-comment?atlOrigin=eyJpIjoiMWMyNjc3MTEyMGQyNGVhMzlhNGQ4Njk4NTM2NzRmNDEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1920#add-comment?atlOrigin=eyJpIjoiMWMyNjc3MTEyMGQyNGVhMzlhNGQ4Njk4NTM2NzRmNDEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:81e20ed )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220314/5d36f817/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-0001eff7-e653-43c1-8bd9-bc12ed8942bf
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220314/5d36f817/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-fb58ad60-2f52-4643-8bc5-5ed4fc20580f
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220314/5d36f817/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-6ad04153-7793-4205-af7c-c3c0bbce852a
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220314/5d36f817/attachment-0005.png>


More information about the commits mailing list