-
Notifications
You must be signed in to change notification settings - Fork 112
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
log whether "matching cert" is consistent with the bug fix #10765
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, barring the analytics param update. Other feedback is not blocking
app/services/analytics_events.rb
Outdated
@@ -4931,6 +4931,8 @@ def rules_of_use_visit | |||
# @param [Integer] requested_ial | |||
# @param [Boolean] request_signed | |||
# @param [String] matching_cert_serial | |||
# @option extra [Boolean] encryption_cert_matches_matching_cert If the encryption certificate |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Change to @param
and add as a... parameter
end | ||
|
||
it 'notes that in the analytics event' do | ||
IdentityLinker.new(user, service_provider).link_identity |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Mayyyybe look into updating generate_saml_response to do this "and they have a verified email" dance
changelog: Internal, Analytics, add logging for SAML namespace fix
09211df
to
57bfca9
Compare
* Add logging to determine if bug fix will cause problems with partners * changelog: Internal, Analytics, Add logging for SAML namespace fix
🎫 Ticket
Link to the relevant ticket:
Add SAML request validation matching certificate logging
🛠 Summary of changes
Adds logging so that we can determine which partners, if any, may experience breaking changes when we deploy the code that accurately finds the DigestMethod for SAML request assertions that are not using the
ds
namespace.This change: