login.vm consent revocation toggle ?

Tom Zeller tzeller at dragonacea.biz
Thu Oct 23 22:23:11 EDT 2014


As part of porting uApprove, the password authn view (login.vm) should
optionally provide a checkbox to allow users to revoke prior attribute
release consent. Currently the checkbox is commented out in login.vm,
do we want a toggle so that login.vm does not need to be modified to
enable consent revocation ?

The object which holds the configuration which controls whether
consent is enabled is the AttributeReleaseFlowDescriptor, so the login
view would need to call the accessor method of the flow descriptor for
the toggle. The flow descriptor would be looked up via a lookup
strategy. We would also need to check to see if the
"attribute-release" flow is enabled via the property in
idp.properties.

Not sure if we want all that running every login or not.


More information about the dev mailing list