Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cookie Renewal for SBL cookie #1335

Closed
TheTechArch opened this issue Mar 16, 2019 · 2 comments
Closed

Cookie Renewal for SBL cookie #1335

TheTechArch opened this issue Mar 16, 2019 · 2 comments
Labels
area/authentication Area: Issues related to authentication in Altinn Studio Epic Used by zenhub to identify the epics that group issues. kind/user-story Used for issues that describes functionality for our users.
Milestone

Comments

@TheTechArch
Copy link
Member

TheTechArch commented Mar 16, 2019

Description
When a user is logged in to Altinn and access Altinn Apps / Altinn Platform the forms authentication cookie (.aspxauth) used in the old platform will not be refreshed.

A user can experience that he is logged out when he redirects back to messagebox even he has been active all the time.

To prevent this SBL needs to authenticate the forms authentication cookie based on the altinnstudioruntime cookie.

The Altinn Studio runtimecookie contains a JWT token. That token will be refreshed while user is using Altinn Apps or Altinn Platform.

The proposed solutions it that when a user is redirected to login page in SBL portal, that SBL page needs to verify if there exist a valid JWT cookie and if so generate a new .aspxauth cookie based on the claims in the JWT token.

We need to create a mechanismen to update the SBL cookie when the JWTCookie is refreshed/created and update through the JWTCookie refresh endpoint #1718

Acceptance criterea

  • A user gets his forms authentication cookie updated when using Altinn Apps / Platform
@TheTechArch TheTechArch added kind/user-story Used for issues that describes functionality for our users. status/draft Status: When you create an issue before you have enough info to properly describe the issue. area/authentication Area: Issues related to authentication in Altinn Studio labels Mar 16, 2019
@lvbachmann lvbachmann added this to the MVP.2 milestone Mar 20, 2019
@TheTechArch TheTechArch removed the status/draft Status: When you create an issue before you have enough info to properly describe the issue. label May 12, 2019
@GGunnar GGunnar modified the milestones: MVP.2, MVP.3 Jun 4, 2019
@GGunnar GGunnar modified the milestones: MVP.3, MVP.3.2 Oct 8, 2019
@GGunnar GGunnar modified the milestones: MVP.3.2, MVP.3.3 Oct 18, 2019
@GGunnar GGunnar modified the milestones: MVP.3.3, CD - phase 1 Oct 28, 2019
@GGunnar GGunnar added the Epic Used by zenhub to identify the epics that group issues. label Nov 5, 2019
@GGunnar GGunnar modified the milestones: CD - phase 1, MVP.3.4 Nov 5, 2019
@GGunnar GGunnar modified the milestones: MVP.3.4, For consideration Nov 20, 2019
@GGunnar GGunnar self-assigned this Nov 20, 2019
@GGunnar GGunnar removed their assignment Nov 21, 2019
@acn-sbuad acn-sbuad changed the title Implement Cookie Renewal for SBL cookie Cookie Renewal for SBL cookie Apr 1, 2020
@lvbachmann
Copy link
Contributor

@acn-sbuad Do you know any remaining work left to achieve the goals of this epic when #3927 is complete? If not - we'll mark this as done.

@lvbachmann
Copy link
Contributor

All issues closed, thus closing the epic.

@lvbachmann lvbachmann removed this from the 2020-April milestone Apr 29, 2020
@lvbachmann lvbachmann added this to the 2020-w16/17 milestone Apr 29, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/authentication Area: Issues related to authentication in Altinn Studio Epic Used by zenhub to identify the epics that group issues. kind/user-story Used for issues that describes functionality for our users.
Projects
None yet
Development

No branches or pull requests

3 participants