PR#156: Fix UserInfo signing by adding the field to the SP configuration - ipsilon

Patrick Uiterwijk • 7 years ago

f3784b2

ipsilon/providers/openidc/provider.py

file modified

+6 -1

		`@@ -345,6 +345,12 @@`
		`['RS256'],`
		`self.get_current_info('id_token_signed_response_alg'),`
		`readonly=self.readonly),`
		`+ pconfig.Pick(`
		`+ 'UserInfo Signed Response Alg',`
		`+ 'Algorithm used to sign userinfo',`
		`+ ['', 'RS256'],`
		`+ self.get_current_info('userinfo_signed_response_alg'),`
merlinthp commented 7 years ago I assume get_current_info() already knows how to fetch this data?
alert("boo! (puiterwijk was here)"); Uiterwijk (puiterwijk)">puiterwijk commented 7 years ago It will use the last fallback of '', which is just fine (since the code that deals with this expects something Falsey).
		`+ readonly=self.readonly),`
		`pconfig.String(`
		`'Initiate Login URI',`
		`'URI that third party can use to initiate login at client.',`
		`@@ -363,7 +369,6 @@`
		`# TODO:`
		`# id_token_encrypted_response_alg`
		`# id_token_encrypted_response_enc`
		`- # userinfo_signed_response_alg`
		`# userinfo_encrypted_response_alg`
		`# userinfo_encrypted_response_enc`
		`# request_object_signing_alg (defualt none)`