1:50 a.m.
Last chance to comment on Application Initiated Action design:
https://github.com/keycloak/keycloak-community/pull/7
3:27 p.m.
An AIA is initiated with an auth request. So before the AIA runs, any
required actions set by the admin will run.
Is that OK or should we skip any other required action?
I think it definitely makes sense if you are logging in to do the AIA.
For instance, admin wants user to update his profile. User does an AIA
for change password, but he is not logged in.
0) User is presented with login screen and logs in.
1) User is presented with "update profile" screen.
2) User is presented with "change password screen.
3) User is redirected back to his app.
User does an AIA for change password, but he is already logged in.:
1) User is presented with "update profile" screen.
2) User is presented with "change password screen.
3) User is redirected back to his app.
Is that OK, or should step 1 be skipped in the second scenario?
On 5/6/2019 2:50 AM, Stian Thorgersen wrote:
Last chance to comment on Application Initiated Action design:
https://github.com/keycloak/keycloak-community/pull/7
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
1:12 a.m.
Required actions should run as soon as possible. As such required actions
should execute prior to an AIA. We should probably consider checking what
required actions have executed though to make sure that a single action is
not triggered multiple times. So if an AIA is the same action as a required
action that has already been done, then perhaps it should be skipped as it
has already been done?
On Thu, 27 Jun 2019 at 22:30, Stan Silvert <ssilvert(a)redhat.com> wrote:
An AIA is initiated with an auth request. So before the AIA runs,
any
required actions set by the admin will run.
Is that OK or should we skip any other required action?
I think it definitely makes sense if you are logging in to do the AIA.
For instance, admin wants user to update his profile. User does an AIA
for change password, but he is not logged in.
0) User is presented with login screen and logs in.
1) User is presented with "update profile" screen.
2) User is presented with "change password screen.
3) User is redirected back to his app.
User does an AIA for change password, but he is already logged in.:
1) User is presented with "update profile" screen.
2) User is presented with "change password screen.
3) User is redirected back to his app.
Is that OK, or should step 1 be skipped in the second scenario?
On 5/6/2019 2:50 AM, Stian Thorgersen wrote:
> Last chance to comment on Application Initiated Action design:
>
> https://github.com/keycloak/keycloak-community/pull/7
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
6:14 a.m.
On 6/28/2019 2:12 AM, Stian Thorgersen wrote:
Required actions should run as soon as possible. As such required
actions should execute prior to an AIA. We should probably consider
checking what required actions have executed though to make sure that
a single action is not triggered multiple times. So if an AIA is the
same action as a required action that has already been done, then
perhaps it should be skipped as it has already been done?
It looks like the logic
must already be there to avoid duplicates. I
haven't found where in the code this happens, but it seems to be working
properly by default.
On Thu, 27 Jun 2019 at 22:30, Stan Silvert <ssilvert(a)redhat.com
<mailto:ssilvert@redhat.com>> wrote:
An AIA is initiated with an auth request. So before the AIA runs,
any
required actions set by the admin will run.
Is that OK or should we skip any other required action?
I think it definitely makes sense if you are logging in to do the
AIA.
For instance, admin wants user to update his profile. User does
an AIA
for change password, but he is not logged in.
0) User is presented with login screen and logs in.
1) User is presented with "update profile" screen.
2) User is presented with "change password screen.
3) User is redirected back to his app.
User does an AIA for change password, but he is already logged in.:
1) User is presented with "update profile" screen.
2) User is presented with "change password screen.
3) User is redirected back to his app.
Is that OK, or should step 1 be skipped in the second scenario?
On 5/6/2019 2:50 AM, Stian Thorgersen wrote:
> Last chance to comment on Application Initiated Action design:
>
> https://github.com/keycloak/keycloak-community/pull/7
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-dev
2003
days inactive
2056
days old
3 comments
2 participants
participants (2)
-
Stan Silvert -
Stian Thorgersen