Consent notes while testing
Tom Zeller
tzeller at dragonacea.biz
Mon Nov 17 17:08:13 EST 2014
>>> The "Reject" button option seems like it should signal an error event,
>>> probably. Is that the intent and it's just not done yet?
>>
>>No, I reproduced the current uApprove behavior. If we want to change
>>that into an error event, sure I'll take the help.
>
> Ok, yeah, I think that should change.
Allright, at the time I wasn't sure what to change it to.
> Also, we need the auditing, which I'm assuming isn't being done now?
Oh, right, that's a missing TODO. I have a note to look at your auditing code.
> Just for the sake of starting out, which action(s) would be the ones that
> know what the user chooses? Or is it all stored in the context tree in
> some intelligible fashion...?
The action which reads user input is n.s.idp.consent.flow.ExtractConsent.
The consent context holds current and previous Consent objects.
Consent object IDs are passed as parameters. For every Consent ID
received as input from the user, the ExtractConsent action sets
approved to true, which otherwise defaults to false.
Is that quick explanation enough ?
More information about the dev
mailing list