00b048d94d
🗃️ (redis) remove Redis support
...
We switched to stateless OIDC.
2026-03-26 14:34:58 +01:00
14f9d42889
⬆️ (oidc-test-client) create Helm chart for test client
...
This helps running tests with the app running in a
Kubernetes cluster.
2026-03-20 15:32:08 +01:00
9994eb84b0
⬆️ (python) upgrade to Python 3.14.3
...
Bumping base image to avoid reported vulnerabilities.
2026-02-27 19:04:37 +01:00
a56ce17b34
⬆️ (oidc-test-client) upgrade oic to 1.7.0
...
This mainly avoids a conflict with the oidc2fer requirements
when installing both in a local virtualenv for IDE support.
2025-09-17 16:06:36 +02:00
a8bf8f61b4
🐛 (oidc) stop forcing id_token 'acr' claim
...
There is a regression in pyop 3.4.2 which causes the configured
extra_id_token_claims to be ignored. Fortunately, ProConnect Core
now requests the required `acr` claim explicitly, so it is no longer
necessary to force it.
The OIDC test client was updated to request the `acr` claim in the
same way that ProConnect does it.
2025-09-17 16:06:35 +02:00
c27ebfe6ae
🚀 (logging) allow customizing log levels per logger
...
This lets one enable increased logging at a finer level. For example,
one could enable debug logging for a specific logger, while keeping the
rest of the application at info level.
2025-03-06 19:27:01 +01:00
039d9a12cc
✨ (static) add static file serving
...
We needed a way to serve a handful of static assets, starting with
the ProConnect logo to be embedded in IdP pages.
2024-09-11 10:44:11 +02:00
82fc42d093
🔒 ️(saml) only allow employees to authenticate
...
We check the eduPersonAffiliation attribute for a "employee" value to
reject students.
2024-07-22 17:32:20 +02:00
4d19d6ec1b
🚀 (logging) enable JSON logs and LOG_LEVEL env var ( #11 )
...
All logs (Gunicorn + SATOSA) are now logged as JSON and the level can be
controlled with the LOG_LEVEL environment variable.
2024-06-04 16:28:15 +02:00
78a1b549fc
🚀 (redis) add Redis instance to dev and staging
...
Necessary to support more that one SATOSA worker.
2024-04-29 22:28:18 +02:00
b50126675a
🔒 ️(oidc) return JWT from userinfo endpoint
...
AgentConnect apparently requires the userinfo endpoint to return a
signed JWT.
2024-04-29 16:35:33 +02:00
b8037e7b69
🚀 (staging) don't default to 3 Gunicorn workers
...
Currently we let SATOSA store some state in-memory. This cannot
work if we have multiple workers.
2024-04-25 11:09:18 +02:00
a6d3483ad9
🎨 (tooling) generate default SATOSA secrets for developemnt
...
`make bootstrap` will now generate well-formed secrets in
env.d/development/satosa. This also serves to document one way
of generating such secrets.
2024-04-17 17:00:06 +02:00
3b2e63e2b5
✅ (test) setup end-to-end manual test
...
This sets up a test OIDC client, that will start an authentication flow
to the RENATER test federation through our SATOSA instance.
2024-04-17 16:10:12 +02:00
3e71b2166c
🏗️ (common) replace Django app with SATOSA
...
We mostly import SATOSA and launch its WSGI app.
2024-04-17 14:46:15 +02:00
4fc43c023a
🏗️ (common) remove Keycloak
...
We won't be using Keycloak.
2024-04-15 18:31:20 +02:00
cde532dcef
✨ (project) add current boilerplate for Django projects
...
includes a working docker compose project, a Makefile for dev,
a CI configuration and a Django starter project.
2024-03-11 19:17:25 +01:00
Jonathan Perret