search

OpenConext / Stepup-Gateway

Stepup Gateway
Apache License 2.0
6 stars 3 forks source link

As the Gateway I should be able to act as a Transparent Proxy so that SPs can use the Gateway as transparent proxy #404

Open phavekes opened 1 day ago

phavekes commented 1 day ago

This issue is imported from pivotal - Originaly created at Sep 24, 2014 by Daan van Renterghem

phavekes commented 1 day ago

SURFconext does understand scoping now. Option is to handle this using real scoping, this would require the GW to be transparant for scoping. (Pieter van der Meulen - Mar 10, 2015)

phavekes commented 1 day ago

The current scoping implementation in the gateway is that it sets the SP as scope in the AuthnRequest that is sent to SURFconext, is this what you mean with transparent scoping?

See https://github.com/SURFnet/Stepup-Gateway/blob/73e57b369613a1625c0337aca6174c796bad16b6/src/Surfnet/StepupGateway/GatewayBundle/Controller/GatewayController.php#L84 (Daan van Renterghem - Mar 11, 2015)

phavekes commented 1 day ago

I ment the other kind of scoping, scoping using IDPList. We will need to verify the OpenConext scoping behaviour when both IDPList and RequesterID are used by a SP that is configured as trusted proxy. in OpenConext. (Pieter van der Meulen - Mar 11, 2015)

phavekes commented 1 day ago

This seems obsolelte now that EB can perform the stepup function for SPs that require transparent proxying. (Thijs Kinkhorst - Sep 15, 2021)