search

OSC / ood_auth_registration

(DEPRECATED - we now use Keycloak for identity brokering) OSC OnDemand Open ID Connect CI Logon Registration page
MIT License
1 stars 1 forks source link

Fix headers #21

Closed ericfranz closed 7 years ago

ericfranz commented 7 years ago

Display more headers for IDP you are linking to so when logging in with Keycloak you see something more than

Login User: Eric Franz
Login Email: efranz@osc.edu

i.e.:

screen shot 2017-06-25 at 6 10 45 pm

We display Issuer, Subject, and Preferred Username headers, if they exist. This means when linking a CILogon account, the user will see:

screen shot 2017-06-25 at 6 12 05 pm

Instead of:

screen shot 2017-06-25 at 6 12 10 pm

Though displaying subject might be unnecessary.

ericfranz commented 7 years ago

Removed the subject claim, which didn't seem to add useful information (though maybe it would in the future if one of the other claims didn't correctly identify the subject in a human readable form?)

Remember, the default REMOTE_USER for mod_auth_openid is sub@iss