2:37 p.m.
(Call should be back to the regular time by March 31st)
Attendees
Ivan, Heather, Scott K, John P, Hannah Sebuliba
0 - Agenda bash
1 - GitHub review
a. Satosa - https://github.com/IdentityPython/SATOSA
Ivan has made some commits on Satosa. Some of them are breaking changes (removing
deprecated option). The next release will be a breaking release. Have also added some
things around logging. See example files, the proxy.conf has new options around logging (
https://github.com/IdentityPython/SATOSA/blob/master/example/proxy_conf.yam…)
Recommendation, though, is to leave as is and set the log level, and define at the service
level where the log should be.
Also can now query Satosa during run time to find out what version is running.
In the core Satosa, there were references to the consent and account linking services that
have been removed. There should not be any dependency on microservices in the core.
Next up: looking at how state is being handled, and introducing high-level functions to
better manage state. Also looking at some of the other PRs:
• https://github.com/IdentityPython/SATOSA/pull/316
• https://github.com/IdentityPython/SATOSA/pull/314
• https://github.com/IdentityPython/SATOSA/pull/279
• https://github.com/IdentityPython/SATOSA/pull/280
Also looking at the issue Scott K has filed (checking the scope on attributes, and
filtering out attributes based on that scope). (
https://github.com/IdentityPython/SATOSA/issues/297)
b. pySAML2 - https://github.com/IdentityPython/pysaml2
Not many changes. Made some changes to the version module.
Next up: review issues that have come up, including nameID format/policy and how those
should be different configuration options. Also, of higher priority, configuration around
which algorithms we use and how we advertise them. There are also issues around
certificates, signing and encryption/decryption.
Later will look into the problem with the redirect binding and the signed response which
caused a failure. Also, trust and certificates
(https://github.com/IdentityPython/pysaml2/issues/594)
See:
• https://github.com/IdentityPython/pysaml2/pull/662
• https://github.com/IdentityPython/pysaml2/pull/660
• https://github.com/IdentityPython/pysaml2/pull/645
• https://github.com/IdentityPython/pysaml2/pull/628
• https://github.com/IdentityPython/pysaml2/pull/625
• https://github.com/IdentityPython/pysaml2/issues/669
• https://github.com/IdentityPython/pysaml2/issues/659
d. pyFF - https://github.com/IdentityPython/pyFF
Heather has asked Leif to send an update.
d. OIDC - https://github.com/IdentityPython (JWTConnect-Python-OidcRP,
JWTConnect-Python-CryptoJWT, etc)
Roland is actively working on items in the repository now.
3 - AOB
Creating new microservices - new documentation available:
https://github.com/IdentityPython/SATOSA/wiki/Anatomy-of-a-response-micro-s…
Ivan is thinking making this part of Satosa so microservices won’t need their own helper.
You can use this directly with your own services, or you can import it from Satosa. There
is also a new test case available to test the new logging helper. Will move this into core
soon so it will be easier for existing microservices to take advantage of it.
Thanks! Heather