Uploaded image for project: 'Single Sign On'
  1. Single Sign On
  2. MGNLSSO-206

Upgrade Pac4j to latest version 5.7.x

    XMLWordPrintable

Details

    • Story
    • Resolution: Fixed
    • Major
    • 3.0.1
    • None
    • None
    • None
    • Yes
    • Yes
    • AdminX 25, AdminX 26 Xmas & New year
    • 3

    Description

      Context

      Currently, magnolia-sso module is using Pac4j version 5.4.6, and Pac4j has released 5.7.x quite some times.

      ACs:

      • Make use of the latest Pac4j version 5.7.x (current is 5.7.0) to have better shape for SSO module

      Development notes:

      I had a scan through the change log (https://github.com/pac4j/pac4j/blob/master/documentation/docs/release-notes.md#jdk11) from 5.4.6 to 5.7.0, there is a change could impact the SSO module directly:

      v5.7.0:
      The oauth.getProfileCreator() and the oidc.getProfileCreator() can directly be used in the ParameterClientHeaderClient and DirectBearerAuthClient for bearer calls; Deprecated the UserInfoOidcAuthenticator

      Cause we are using UserInfoOidcAuthenticator for HTTP Bearer authentication, cc mgeljic . So, we have to review this and find an alternative authenticator.

      Discovery

      • In general, this will not have any blocker issue in the upgrade process
      • About the deprecated UserInfoOidcAuthenticator , we can still use the authenticator or even better to refactor it to use oidc.getProfileCreator() instead

      Checklists

        Acceptance criteria

        Attachments

          Issue Links

            There are no Sub-Tasks for this issue.

            Activity

              People

                nguyen.phung Nguyen Phung Chi
                nguyen.phung Nguyen Phung Chi
                AdminX
                Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:
                  Work Started:

                  Checklists

                    Task DoD

                    Time Tracking

                      Estimated:
                      Original Estimate - Not Specified
                      Not Specified
                      Remaining:
                      Remaining Estimate - Not Specified
                      Not Specified
                      Logged:
                      Time Spent - 3d 3h
                      3d 3h