search

uchicago-library / library_website

The University of Chicago Library Website
5 stars 5 forks source link

Borrow Direct encryption #266

Open dbietila opened 4 years ago

dbietila commented 4 years ago

Wew run a Shibboleth Service Provider (SP) that fronts the login to BorrowDirect. It's invisible to the user, but forces the login through the campus login page. Shibboleth releases the barcode to our SP, which in turn redirects the borrower to the db.relaisd2d.com address with the LS and PI parameters.

We'll need to add encryption (including managing the public key!) to our SP or to OLE.

Full background is available here: https://uchicago.box.com/s/0u2ks6g4ejrskw3xv42em6nkhp0e9x3c

dbietila commented 4 years ago

Relevant code on on staff.lib is at /data/web/secure/apps/redirect-to-borrow-direct/