Add initial setting config

This commit is contained in:
zandercymatics 2024-05-15 15:25:00 -06:00
parent 6d0220e77a
commit 5bfd6c867f
No known key found for this signature in database
GPG key ID: FF4636ABEC9682B7
2 changed files with 8 additions and 0 deletions

View file

@ -95,6 +95,8 @@ def login_callback(request):
# if not satisfied, redirect user to login with stepped up acr_value
if _requires_step_up_auth(userinfo):
# add acr_value to request.session
# LOOK HERE this is basically the flag that indicates that we should proceed
request.session["acr_value"] = CLIENT.get_step_up_acr_value()
return CLIENT.create_authn_request(request.session)
user = authenticate(request=request, **userinfo)

View file

@ -563,6 +563,8 @@ OIDC_PROVIDERS = {
"user_info_request": ["email", "first_name", "last_name", "phone"],
"acr_value": "http://idmanagement.gov/ns/assurance/ial/1",
"step_up_acr_value": "http://idmanagement.gov/ns/assurance/ial/2",
"vtr": ["Pb","P1"],
"vtm": "https://developer.login.gov/vot-trust-framework",
},
"client_registration": {
"client_id": "cisa_dotgov_registrar",
@ -581,6 +583,10 @@ OIDC_PROVIDERS = {
"user_info_request": ["email", "first_name", "last_name", "phone"],
"acr_value": "http://idmanagement.gov/ns/assurance/ial/1",
"step_up_acr_value": "http://idmanagement.gov/ns/assurance/ial/2",
# "P1" is the current IdV option; "Pb" stands for 'biometric'
"vtr": ["Pb","P1"],
# Stand in replacement for the step_up_acr_value for ial2
"vtm": "https://developer.login.gov/vot-trust-framework",
},
"client_registration": {
"client_id": ("urn:gov:cisa:openidconnect.profiles:sp:sso:cisa:dotgov_registrar"),