-
Notifications
You must be signed in to change notification settings - Fork 194
feat: [OCISDEV-230] poc, /admin-settings OTP #12942
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes. |
|
|
|
There is already a PR in progress for this #12925 |
|
|
||
| // Avoid re-triggering when returning from step-up or when a request is already in-flight for this route | ||
| const hasStepupParam = !!to.query.stepup | ||
| const hasGlobalStepupFlag = new URLSearchParams(window.location.search).has('stepupAcr') |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why use query? Shouldn't this be dependent on capabilities based on the requirements?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, should be mandatory, latest version is mandatory. The query was for sake of easier testing the PoC
| name: 'admin-settings-general', | ||
| component: General, | ||
| beforeEnter: (to, from, next) => { | ||
| if (!$ability.can('read-all', 'Setting')) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Seems this is lost in the new guard?
| extraQueryParams: { | ||
| acr_values: acr, | ||
| prompt: 'login', | ||
| max_age: 0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Shouldn't the max_age be defined in the auth flow?
| const redirectRoute = this.router.resolve(this.userManager.getAndClearPostLoginRedirectUrl()) | ||
| const postRedirectUrl = this.userManager.getAndClearPostLoginRedirectUrl() | ||
| try { | ||
| sessionStorage.setItem('oc.postStepupRedirectUrl', postRedirectUrl) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why set it again?
04bb8ea to
18de60f
Compare
Description
Show OTP on /admin-settings:
Related Issue
Motivation and Context
How Has This Been Tested?
Screenshots (if appropriate):
Types of changes
Open tasks: