Commit dee12b25 authored by Gaël Berthaud-Müller's avatar Gaël Berthaud-Müller
Browse files

add notes

parent 103fd2f1
Pipeline #165 passed with stage
in 1 minute and 8 seconds
......@@ -186,6 +186,7 @@ def register_identity_authority(identity_authority, identity_authority_config):
def require_openid_delegation(subject, issuer):
# TODO: make this check parents for oidc record
if subject.endswith('.test'):
print('Skipping dns delegation check for "%s" because of test domain', subject)
return
......
......@@ -114,6 +114,7 @@ def user_info():
payload = decode_validation_token(token)
domain = payload['id4me.identifier'] if 'id4me.identifier' in payload else None
subject = payload['sub']
# TODO: what do we do with that?
# require_openid_delegation(domain, payload['iss'])
try:
authorized_claims = payload['clm']
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment