November 2021 - Idpy-discuss

Notes: idpy developers call, 16 November 2021

by hlflanagan＠sphericalcowgroup.com

Attendees: Heather, Ivan, Roland, Scott, Peter, Christos, Giuseppe Notes: 1 - GitHub review a. OIDC - https://github.com/IdentityPython (JWTConnect-Python-OidcRP, JWTConnect-Python-CryptoJWT, etc) The authors of draft-ietf-regext-rdap-openid are considering the use of the OIDC Federation spec. Heather has put Roland/Giuseppe in touch with the authors. All the libraries are being updated to make it through the OIDC test suite; oidcop is the last one to be updated and is in final review. When this is complete, we can continue to work such as development efforts around identity assurance (EKYC group). The interop work is coming out of fintech. The verification of claims is related to the FAPI work; it's one part. There is a client verifcation method called MTLS, but if you're an RP that wants to use it, you have to be able to look at the certs used during the TLS communication; that's not possible in the current libraries (see https://www.python-httpx.org/advanced/#ssl-certificates) b. Satosa - https://github.com/IdentityPython/SATOSA Will be creating a new release for Satosa; various bug fixes. Ivan has created a new label, "Next Release", which will tag issues and PRs that will be merged into the next release so that people know what's coming next. Ivan needs to go through the various issues to see if they need to be closed, moved, or whether more work is needed. Ivan is looking into GitHub actions; Travis is still having problems. Satosa and the microservices interfaces being updated to support types; goal is to keep the interfaces stable. Will do this via the data classes in pydantic. Hopes to expand this into pySAML2. This is a low level change. c. pySAML2 - https://github.com/IdentityPython/pysaml2 New release available: https://github.com/IdentityPython/pysaml2/releases/tag/v7.1.0 We now have proper support for verifying signatures for redirect bindings on incoming authn and logout requests. See change log for more details. There is a new capability to allow for on-demand metadata refresh. the endpoint is implemented in Satosa, but not set up by default. Could a worker in Satosa's web server be reserved for this? Ivan to look into having a separate queue to handle this task. d. Any other project (pyFF, djangosaml2, etc) Giuseppe needs to update djangosaml2 with the latest pysaml2. There is a scalability issue in the eduTEAMs space (OpenID front end and the oidc libraries); they are passing JSON blobs up to 50Mb, which causes time outs. But since the data structure must be what the library expects, it's hard to pull apart this blob. No immediate solutions available. Thanks! Heather

3 years, 1 month

2
1
0 0

Reminder: idpy dev call, 16 November 2021

by hlflanagan＠sphericalcowgroup.com

Tuesday, 16 November 2021, 13:00 UTC BlueJeans: ⁨https://bluejeans.com/444837426?src=join_info⁩ Agenda: 0 - Agenda bash 1 - GitHub review a. OIDC - https://github.com/IdentityPython (JWTConnect-Python-OidcRP, JWTConnect-Python-CryptoJWT, etc) b. Satosa - https://github.com/IdentityPython/SATOSA c. pySAML2 - https://github.com/IdentityPython/pysaml2 d. Any other project (pyFF, djangosaml2, etc) 2 - Discussion Thanks! Heather

3 years, 1 month

1
0
0 0

Fwd: Re: [regext] I-D Action: draft-ietf-regext-rdap-openid-08.txt

by hlflanagan＠sphericalcowgroup.com

3 years, 1 month

1
0
0 0

Notes: idpy developers call, 2 November 2021

by hlflanagan＠sphericalcowgroup.com

Welcome to time-change-confusion time of year! Attendees Roland, Ivan, Heather Agenda: 0 - Agenda bash 1 - GitHub review a. OIDC - https://github.com/IdentityPython (JWTConnect-Python-OidcRP, JWTConnect-Python-CryptoJWT, etc) Third implementor's federation draft is out for vote in the OIDF. Roland did the last certification step (logout certification for the RP libraries). Those have been submitted, but Roland hasn't heard back yet. Considering a TNC22 session with Giuseppe on the intended move to an OIDC federation for Italian government entities. Projects was using a crypto library at version 3 that suddenly jumped to version 35 (they are changing both the code and the versioning scheme) but that broke many things. b. Satosa - https://github.com/IdentityPython/SATOSA Preparing a new release that will include resolution to an issue (https://github.com/IdentityPython/SATOSA/pull/392) that the OIDC front end using the old pyop library that did not properly handle error redirect URIs. Will set the minimum version allowed for pyop to 3.3.1. The changes bring us closer to phasing out pyop. Ivan will redo the Satosa docker image, adding additional documentation along with a few other changes. Will be working on updating "types" first. More info will be in the code; it will be a gradual change that starts in the microservices. https://github.com/IdentityPython/SATOSA/issues/391 - Ivan pushed a fix for this, but wants to expand the fix more to allow for rotating state-encryption keys. c. pySAML2 - https://github.com/IdentityPython/pysaml2 Preparing a new release that will tie the verification request with a redirect binding. Expect a big change log. See https://github.com/IdentityPython/pysaml2/pull/805. d. Any other project (pyFF, djangosaml2, etc) No updates. 2 - Discussion Heather is doing another browser update as part of InCommon's webinar series. Registration not required: https://internet2.edu/i2-online/ Thanks! Heather

3 years, 1 month

1
0
0 0

Reminder: idpy dev call, 2 November 2021

by hlflanagan＠sphericalcowgroup.com

Tuesday, 2 November 2021, 13:00 UTC BlueJeans: ⁨https://bluejeans.com/444837426?src=join_info⁩ Agenda: 0 - Agenda bash 1 - GitHub review a. OIDC - https://github.com/IdentityPython (JWTConnect-Python-OidcRP, JWTConnect-Python-CryptoJWT, etc) b. Satosa - https://github.com/IdentityPython/SATOSA c. pySAML2 - https://github.com/IdentityPython/pysaml2 d. Any other project (pyFF, djangosaml2, etc) 2 - Discussion Thanks! Heather

3 years, 1 month

1
0
0 0

2024

2023

2022

2021

2020

2019

2018

2017

Idpy-discuss November 2021