Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

VCauthN environment updates #199

Closed
loneil opened this issue Aug 16, 2024 · 4 comments
Closed

VCauthN environment updates #199

loneil opened this issue Aug 16, 2024 · 4 comments
Assignees

Comments

@loneil
Copy link

loneil commented Aug 16, 2024

Tracking current state and todos here for VCAuthN deployments regarding enabling new features.

Presentation Request settings

  1. Proof protocol: pres exchange protocol 1.0 or 2.0
  2. VCAuth version: Latest release tag is 2.2.0
  3. ACA-Py version: existing uses are 0.12.1, 1.0.0 is available now (2.0 protocol requires 1.0.0 for our uses)
  4. Use OOB: whether to use Connectionless Invitations or Out Of Band to communicate the proof request
  5. URL Deep Link handler: Use c_i format links with full encoded payload, or _url links with a redirect to the payload.
Env Protocol VCauth Version ACA-Py Use OOB Deep Link format
DEV 2.0 main branch code (2.2.2+) 1.1.0 True url
TEST 2.0 2.2.2 1.1.0 True url
PROD 2.0 2.2.2 1.1.0 True url

TTL Index

Needs to be added to Helm charts. This would result in older mongo records being pruned

openwallet-foundation/acapy-vc-authn-oidc#539

Back to App link support

To allow calling apps to pass a safe return link there will need to be some additions in the keycloak config.

The back_to_url forwarded query param would need to be added in appropriate keycloak realms.

We control the access-to-court-materials-jag custom realms and could add there.

Some coordination (previously discussed with SSO team) would be needed to add this alongside our pres_req_conf_id param in common SSO setup to allow SSO integrations to use this.

@loneil
Copy link
Author

loneil commented Aug 16, 2024

@esune adding this to DITP repo since it's not code-based (our specific deployments) but could put in VCAuthN instead

@loneil loneil changed the title VCauthN environment setting updates VCauthN environment updates Aug 16, 2024
@esune esune transferred this issue from bcgov/DITP Aug 20, 2024
@esune esune moved this to Assigned in CDT Enterprise Apps Oct 31, 2024
@esune esune assigned i5okie and unassigned loneil Nov 8, 2024
@esune
Copy link
Member

esune commented Nov 8, 2024

Re-assigning to @i5okie to ensure the deployments are up-to-date after we have merged the PR with the configurations. This can be closed once the deployments are synced in test and prod.

@i5okie i5okie moved this from Assigned to In Progress in CDT Enterprise Apps Nov 8, 2024
@i5okie i5okie moved this from In Progress to In Review in CDT Enterprise Apps Nov 20, 2024
@loneil
Copy link
Author

loneil commented Nov 20, 2024

The settings are all synchronized and working amongst environments.

The items about TTL Index and Back-to-app settings can probably be moved to separate tickets as the settings/version stuff is complete now.

@esune
Copy link
Member

esune commented Nov 21, 2024

Created #209 to handle TTL, closing this as done.

@esune esune closed this as completed Nov 21, 2024
@github-project-automation github-project-automation bot moved this from In Review to Complete in CDT Enterprise Apps Nov 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Archived in project
Development

No branches or pull requests

3 participants