search

OpenConext / Stepup-tiqr

tiqr IdP for step-up authentication
Apache License 2.0
3 stars 2 forks source link

Add the enrollment link on the QR code #128

Closed MKodde closed 2 years ago

MKodde commented 2 years ago

The enrollment link is based on a key that is formed from the user id, a randomly generated and the request id. These values are turned into a nonce called the enrollment key. This key is used to form the QR code and is now also directly used to visit the tiqr registration endpoint withouth scanning the QR code.

An additional Behat scenario was added, simulating the qr-click. Given the design of the Feature, it does not actually click the link, but the contents of the link are used to set the URL, the registration handler is then visiting. So all in all the correct setting of the anchors HREF attribute is verified.

https://www.pivotaltracker.com/story/show/179686777

phavekes commented 2 years ago

Works great in our testing enviroment. Great work @MKodde !