deployment of PoC as an SRAM service

[michielbdejong]

Got the registration from from Harry Kodden. Now setting up the OAuth server from the phase-3 poc on https://sram-auth-server.pondersource.net which is TLS-terminated at Cloudflare and proxies http://vultr3.pondersource.org:80 where the poc code runs in two screens.

[michielbdejong]

http://vultr3.pondersource.org/ works now in my browser, and so does https://sram-auth-poc.pondersource.net/

[michielbdejong]

The connection between that server and SRAM should be that the SRAM is an OIDC OP for it.

So I need to install an OIDC RP on it before I can fill in https://sram.surf.nl/new-service-request

[michielbdejong]

Request is now pending at https://sram.surf.nl/my-requests

Will work with Google login for now, and activate SRAM login when approved

[michielbdejong]

I updated the code so that it tries to do OIDC with SRAM, but don't have it working yet. The process crashes without displaying the error message, which is annoying. I'll try to run in it on localhost or maybe build to js

[michielbdejong]

build fails around csrf-csrf types, and if I remove that from tsconfig.json it fails around require vs import somewhere down in node_modules.

I removed the docker compose volume (docker volume ls on the server) and now I'll retry running the server, see if the error maybe has gone away

[michielbdejong]

OK, error reporting through Nest works now which is a great improvement! Was able to find and fix this bug.

Now looking at https://sram.surf.nl/service-denied?service_name=SRAM+Auth+PoC&error_status=4&entity_id=APP-CD00A924-E614-4588-8607-EF7D4D55EAAB&issuer_id=http%3A%2F%2Flogin.surf.nl%2Fadfs%2Fservices%2Ftrust&user_id=f133d3b043f1b2256da3a6f13efde5893b719c16%40sram.surf.nl

[michielbdejong]

Waiting for SRAM helpdesk https://servicedesk.surf.nl/jira/plugins/servlet/desk/portal/13/SD-76262

[michielbdejong]

in the meantime I'll keep working on the rest of the PoC, I can complete #55 using Google OIDC first.

[michielbdejong]

done!