[JIRA] (IDP-1919) CAS validation flows don't run consent checking interceptor

Clemens Bergmann (Jira) jira at shibboleth.atlassian.net
Tue Mar 15 04:04:40 UTC 2022


Clemens Bergmann ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=617bb50a5800630069a5b0f0 ) *commented* on IDP-1919 ( https://shibboleth.atlassian.net/browse/IDP-1919?atlOrigin=eyJpIjoiODFiYTQ3ZWFkYTNjNDBhYjgzYzcyNTYxNmE1MTJiZWUiLCJwIjoiaiJ9 )

Re: CAS validation flows don't run consent checking interceptor ( https://shibboleth.atlassian.net/browse/IDP-1919?atlOrigin=eyJpIjoiODFiYTQ3ZWFkYTNjNDBhYjgzYzcyNTYxNmE1MTJiZWUiLCJwIjoiaiJ9 )

OK, I will do a backup of the database and /opt/shibboleth-idp before upgrade then.

Thanks for the tip. That worked and sorry for missing that hint in the documentation. I read it twice yesterday and did not make the connection .

Another college made me aware of the next problem down this road. When the User selects _shib_idp_doNotRememberConsent in the consent form the consent is not stored to the database and therefore can not be found by the Token Endpoint. Wouldn’t it be needed to store the consent in this situation anyhow but only with a lifetime matching the validity of the Authorization Code?

( https://shibboleth.atlassian.net/browse/IDP-1919#add-comment?atlOrigin=eyJpIjoiODFiYTQ3ZWFkYTNjNDBhYjgzYzcyNTYxNmE1MTJiZWUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1919#add-comment?atlOrigin=eyJpIjoiODFiYTQ3ZWFkYTNjNDBhYjgzYzcyNTYxNmE1MTJiZWUiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:8522567 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220315/e8f59629/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-c04e4af9-94c4-4423-b48e-670e6a04f46e
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220315/e8f59629/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-a2964877-e43b-47d6-8fb1-a803c59b3598
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220315/e8f59629/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-4d1a885a-89d4-469f-8cdf-3a7330f84e15
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220315/e8f59629/attachment-0005.png>


More information about the commits mailing list