some comments about v3 post-login / post-authn flows

[Cantor, Scott]

On 9/4/14, 3:38 PM, "Marvin Addison" <marvin.addison at gmail.com> wrote:
>
>Just to clarify, is attribute resolution a required precondition of
>the post-authentication flows? I would think so since the consent
>feature is one of the candidate flows and it deals with attributes.

Not in the most general sense, but in the sense that the ones we typically
know about tend to be after. I'm speculating we might just create hooks
pre and post resolution just because it's easy to do, and short-circuiting
attribute lookup might be useful in some cases.

These really don't have any particular dependency on where they run, other
than specific cases that do or don't need to happen at particular points.
If it weren't silly, we could have a callout at every step, the flows
don't care.

-- Scott