zydronium/manage.get.gov
1
0
Fork 0
mirror of https://github.com/cisagov/manage.get.gov.git synced 2025-05-15 17:17:02 +02:00
Code Issues Projects Releases Packages Wiki Activity

Add initial setting config

Browse source
This commit is contained in:
zandercymatics 2024-05-15 15:25:00 -06:00
parent 6d0220e77a
commit 5bfd6c867f
No known key found for this signature in database
GPG key ID: FF4636ABEC9682B7
2 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/djangooidc/views.py
View file

@ -95,6 +95,8 @@ def login_callback(request):
# if not satisfied, redirect user to login with stepped up acr_value # if not satisfied, redirect user to login with stepped up acr_value
if _requires_step_up_auth(userinfo): if _requires_step_up_auth(userinfo):
# add acr_value to request.session # add acr_value to request.session
# LOOK HERE this is basically the flag that indicates that we should proceed
request.session["acr_value"] = CLIENT.get_step_up_acr_value() request.session["acr_value"] = CLIENT.get_step_up_acr_value()
return CLIENT.create_authn_request(request.session) return CLIENT.create_authn_request(request.session)
user = authenticate(request=request, **userinfo) user = authenticate(request=request, **userinfo)

6
src/registrar/config/settings.py
View file

@ -563,6 +563,8 @@ OIDC_PROVIDERS = {
"user_info_request": ["email", "first_name", "last_name", "phone"], "user_info_request": ["email", "first_name", "last_name", "phone"],
"acr_value": "http://idmanagement.gov/ns/assurance/ial/1", "acr_value": "http://idmanagement.gov/ns/assurance/ial/1",
"step_up_acr_value": "http://idmanagement.gov/ns/assurance/ial/2", "step_up_acr_value": "http://idmanagement.gov/ns/assurance/ial/2",
"vtr": ["Pb","P1"],
"vtm": "https://developer.login.gov/vot-trust-framework",
}, },
"client_registration": { "client_registration": {
"client_id": "cisa_dotgov_registrar", "client_id": "cisa_dotgov_registrar",
@ -581,6 +583,10 @@ OIDC_PROVIDERS = {
"user_info_request": ["email", "first_name", "last_name", "phone"], "user_info_request": ["email", "first_name", "last_name", "phone"],
"acr_value": "http://idmanagement.gov/ns/assurance/ial/1", "acr_value": "http://idmanagement.gov/ns/assurance/ial/1",
"step_up_acr_value": "http://idmanagement.gov/ns/assurance/ial/2", "step_up_acr_value": "http://idmanagement.gov/ns/assurance/ial/2",
# "P1" is the current IdV option; "Pb" stands for 'biometric'
"vtr": ["Pb","P1"],
# Stand in replacement for the step_up_acr_value for ial2
"vtm": "https://developer.login.gov/vot-trust-framework",
}, },
"client_registration": { "client_registration": {
"client_id": ("urn:gov:cisa:openidconnect.profiles:sp:sso:cisa:dotgov_registrar"), "client_id": ("urn:gov:cisa:openidconnect.profiles:sp:sso:cisa:dotgov_registrar"),