search

JiscSD / archivematica

Free and open-source digital preservation system designed to maintain standards-based, long-term access to collections of digital objects.
http://www.archivematica.org
GNU Affero General Public License v3.0
0 stars 0 forks source link

Make shibboleth optional #20

Closed helenst closed 7 years ago

helenst commented 7 years ago

This allows Shibboleth auth to be switched on and off from the environment using ARCHIVEMATICA_DASHBOARD_SHIBBOLETH_AUTHENTICATION. Enabling this setting will switch on Shibboleth middleware and other settings.

It also toggles an ALLOW_USER_EDITS setting so that users can be editable and change their passwords under normal (model) authentication, but see a read only version of that with Shibboleth. This is a concept that could be extended to other forms of remote authentication. Some of the work here is restoring code that was removed in #5 and making it conditional on ALLOW_USER_EDITS.

I've also got the tests passing again here - changes to the welcome screen logic had been breaking a few of them, so some extra setup was required. Note that the travis job doesn't pass due to flake8 issues in another part of the code (I see that's already being addressed in #17 so will leave it alone)

See also https://github.com/JiscRDSS/rdss-archivematica/pull/25 and https://github.com/JiscRDSS/archivematica-storage-service/pull/6

sevein commented 7 years ago

That problem with Travis is fixed here: 0f0a8ffb77558599f45c094ac65fdd84aa0ddca0 (see #17). I think you can ignore it.