search

italia / spid-cie-oidc-django

The SPID/CIE OIDC Federation SDK, written in Python
Apache License 2.0
27 stars 28 forks source link

[Feat] Metadata discovery loop prevention #4

Closed peppelinux closed 2 years ago

peppelinux commented 2 years ago

during the build of the trust chain a loop may occour due to a bad configurations on entities in a federation. In this case the trust chain builder have to break that short circuit :)

peppelinux commented 2 years ago

we need also to add new unit test with many auth hints to cover critical mechanisms of the real world and also some evil behaviour/misconfiguration of a third party related to the authority_hints claim

peppelinux commented 2 years ago

Closed by https://github.com/peppelinux/spid-cie-oidc-django/commit/76e499f943e609acf9f77acfc2a000081759343b