WIP on more oidc testing

This commit is contained in:
Rachid Mrad 2023-12-07 14:46:21 -05:00
parent ecb30fd73e
commit 1a2b16a3da
No known key found for this signature in database
GPG key ID: EF38E4CEC4A8F3CF
2 changed files with 42 additions and 5 deletions

View file

@ -70,10 +70,13 @@ def login_callback(request):
userinfo = CLIENT.callback(query, request.session)
# test for need for identity verification and if it is satisfied
# if not satisfied, redirect user to login with stepped up acr_value
logger.info('login_callback start')
if requires_step_up_auth(userinfo):
# add acr_value to request.session
logger.info('login_callback inside requires_step_up_auth')
request.session["acr_value"] = CLIENT.get_step_up_acr_value()
return CLIENT.create_authn_request(request.session)
logger.info('login_callback after get_step_up_acr_value')
# return CLIENT.create_authn_request(request.session)
user = authenticate(request=request, **userinfo)
if user:
login(request, user)