-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[QOLSVC-5478] gracefully handle shared emails #2
Conversation
36d29cd
to
e83e3a8
Compare
- Run on all pushes, but only on PRs to master. This ensures we run tests before incorporating third party changes, without doubling up on every PR.
- If a logout path is provided, and if we have a logged-in session, then redirect to SSO and back.
bee7925
to
77a73ae
Compare
should really put in unit tests, bit hard to do end to end testing with this without standing up a pkce sever to mock against. which there is actual items out there which we could put in (may need to fine a python version maybe) |
564c602
to
798e9ac
Compare
798e9ac
to
0aa7f05
Compare
dcde3f4
to
5f734f6
Compare
49afd83
to
932dd71
Compare
932dd71
to
f7c1755
Compare
log.info("No SSO logout path configured, logout of [%s] will be local only", | ||
current_user.name) | ||
return None | ||
session["_in_logout"] = True |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you confirm that our hosting will send them back to the same server ( or refresh me that we have a Memcache shared between the 5 server instances so it will work) am a bit fuzzy on this
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Our load balancer is configured with cookie-based stickiness: https://github.com/qld-gov-au/ckan-qld-infrastructure/blob/a441ea7711b326d7d4970a59a1626ee4b017a744/templates/Datashades-OpsWorks-CKAN-Stack.cfn.yml.j2#L596
Give a nice error, instead of an ugly one, when encountering multiple accounts with the same email.