erlef/oidcc_cowboy

Cowboy OpenId Connect support by using oidcc

oidcc_cowboy's Issues

Google not responding with provider in response QPs. Always ending in bad state

The return URL I get from Google is: http://localhost:4000/session?code=4/D7X-sLvBXgnr0AvHQUg7eZElYne3Wxli6xcpHr36Bts&authuser=0&session_state=c3ea9014627930999c2db4d3e8ba16dbb04dd4c6..2b18&prompt=consent# which does not include a provider params. According to: https://github.com/indigo-dc/oidcc_cowboy/blob/master/src/oidcc_cowboy.erl#L269 oidcc_cowboy requires the provider param to create a new session.

I've looked through the Google' API console but cannot find any option to include this.

Stipend Implementation

Part of erlef/oidcc#221

Requirements

• Good Test Coverage
• Good Code Quality
• Conforms to the following Conformance Profiles
  • Basic Relying Party
  • Relying Party Using Configuration Information
  • Form Post Relying Party
• Secure Defaults
  • Shipped with a secure and complete TLS setup OTP 26 ships with one
  • Can be overridden with custom TLS settings
  • JWT Settings are automatically set up to the most strict settings according to the OIDC Config Introspection
• GitHub Actions Setup that runs
  • Unit Tests
  • Linter
  • Dialyzer
• All libraries are well documented on Hex via rebar3_ex_doc
  • public functions have dialyzer specs
  • public functions have examples
  • contains setup instructions
  • contains examples for most common use cases
• Compatible with latest stable OTP releases at time of publication

TODO

• Move repos to @erlef - @peerst
• chvanikoff/cowboy_session#3 (comment) - Temporary fork: https://github.com/Erlang-Openid/cowboy_session
• Cowboy onrequest hooks
• Public Testing
• Stable Release

Badly handled unknown sessions

creates an error 500 on providers that are not ready