-
Notifications
You must be signed in to change notification settings - Fork 26
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
🐛 [#4435] Fix infinite redirect on sessionrefresh for OIDC #4438
Conversation
3fe34f8
to
73dcaa5
Compare
@sergei-maertens since it's quite a few URLs that should be added to the exempt URLs, should I maybe add a migration or management command to do this (if the respective feature flags are set to true)? |
can't we instead rename the field on the config to have an underscore and implement a property we can override at runtime throught the proxy models? All of this seems like something that can be automatically inferred from settings and I would rather not burden administrators with this. This also makes removing the deprecated code/shims easier in 3.0 as we only need to delete code and we're done, without leaving stale data in the configuration that we cannot possibly explain to users to clean up. IMO that sounds like the simpler solution. |
73dcaa5
to
7a59b7d
Compare
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## master #4438 +/- ##
==========================================
- Coverage 96.58% 96.57% -0.01%
==========================================
Files 720 720
Lines 24012 24002 -10
Branches 2845 2844 -1
==========================================
- Hits 23191 23180 -11
Misses 559 559
- Partials 262 263 +1 ☔ View full report in Codecov by Sentry. |
7a59b7d
to
dc87da4
Compare
dc87da4
to
d17b742
Compare
d17b742
to
d1a3f14
Compare
and django-digid-eherkenning to 0.16.0 to allow the SessionRefresh middleware to work
by default, the OIDC endpoints that are used are marked as exempt from SessionRefresh, but this caused infinite redirects in case the legacy URLs were used
d1a3f14
to
3cc8cba
Compare
Closes #4435
Changes
Checklist
Check off the items that are completed or not relevant.
Impact on features
Release management
I have updated the translations assets (you do NOT need to provide translations)
./bin/makemessages_js.sh
./bin/compilemessages_js.sh
Commit hygiene