9db60451aa
🔧 (helm) use stateless OIDC in dev and staging
...
Getting rid of Redis should help with performance.
2026-03-25 10:37:00 +01:00
159d992783
🔧 (config) add healthcheck to docker-compose
...
This makes docker-compose up --wait work.
2026-02-27 19:05:31 +01:00
f9efafd574
🔧 (metadata) update Renater metadata URL
...
The old URLs were decommissionned on feb. 26.
2026-02-27 14:45:11 +01:00
6c344fae05
✨ (siret) introduce SIRET mapping from EntityID
...
The proxy now uses a SIRET_MAP environment variable that must contain
a JSON mapping of SAML entity IDs to SIRET numbers.
These SIRET numbers will be returned to OIDC clients that request the
`siret` scope, in the `siret` claim.
2025-10-02 19:50:40 +02:00
cb8ff5d878
✅ (e2e) fix e2e test with PC staging
...
Adapt to updated mock service.
2025-03-05 17:52:03 +01:00
15064a0b45
🚀 (config) get SAML entity ID from environment
...
This lets us decouple the entity ID from the deployment URL.
2024-06-19 14:29:50 +02:00
4d19d6ec1b
🚀 (logging) enable JSON logs and LOG_LEVEL env var ( #11 )
...
All logs (Gunicorn + SATOSA) are now logged as JSON and the level can be
controlled with the LOG_LEVEL environment variable.
2024-06-04 16:28:15 +02:00
96e244fd6c
🔒 ️(saml) use eduPersonPrincipalName rather than NameID for sub
...
The NameID returned by the SAML server is actually transient so we can't
use it as a sub. We'll use eduPersonPrincipalName both in sub and uid.
2024-05-15 22:30:56 +02:00
4478152156
🚀 (env) make FER URLs configurable per environment
...
Of course in production we will want the production federation.
2024-04-29 23:09:02 +02:00
78a1b549fc
🚀 (redis) add Redis instance to dev and staging
...
Necessary to support more that one SATOSA worker.
2024-04-29 22:28:18 +02:00
b50126675a
🔒 ️(oidc) return JWT from userinfo endpoint
...
AgentConnect apparently requires the userinfo endpoint to return a
signed JWT.
2024-04-29 16:35:33 +02:00
94cdbc9497
👔 (oidc) generate required claims in user_info
...
Because SATOSA defaults to list-valued attributes, I had to add
a custom attribute processor to return strings in the userinfo
response.
2024-04-25 15:00:36 +02:00
a6d3483ad9
🎨 (tooling) generate default SATOSA secrets for developemnt
...
`make bootstrap` will now generate well-formed secrets in
env.d/development/satosa. This also serves to document one way
of generating such secrets.
2024-04-17 17:00:06 +02:00
3b2e63e2b5
✅ (test) setup end-to-end manual test
...
This sets up a test OIDC client, that will start an authentication flow
to the RENATER test federation through our SATOSA instance.
2024-04-17 16:10:12 +02:00
3e71b2166c
🏗️ (common) replace Django app with SATOSA
...
We mostly import SATOSA and launch its WSGI app.
2024-04-17 14:46:15 +02:00
ce004c5e80
🏗️ (common) remove Postgres
...
We don't need PostgreSQL.
2024-04-17 11:23:29 +02:00
4fc43c023a
🏗️ (common) remove Keycloak
...
We won't be using Keycloak.
2024-04-15 18:31:20 +02:00
acc3df5b03
🏗️ (common) remove localization support (crowdin)
...
Not required for SATOSA, at least for now.
2024-04-15 18:25:47 +02:00
5492cfaf8b
🚨 (common) remove version from docker-compose.yml to fix warning
...
Docker compose v2 does not use the `version` entry.
2024-04-15 18:25:47 +02:00
cde532dcef
✨ (project) add current boilerplate for Django projects
...
includes a working docker compose project, a Makefile for dev,
a CI configuration and a Django starter project.
2024-03-11 19:17:25 +01:00
Jonathan Perret