Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

VCauthN environment updates #199

Open
loneil opened this issue Aug 16, 2024 · 1 comment
Open

VCauthN environment updates #199

loneil opened this issue Aug 16, 2024 · 1 comment
Assignees

Comments

@loneil
Copy link

loneil commented Aug 16, 2024

Tracking current state and todos here for VCAuthN deployments regarding enabling new features.

Presentation Request settings

  1. Proof protocol: pres exchange protocol 1.0 or 2.0
  2. VCAuth version: Latest release tag is 2.2.0
  3. ACA-Py version: existing uses are 0.12.1, 1.0.0 is available now (2.0 protocol requires 1.0.0 for our uses)
  4. Use OOB: whether to use Connectionless Invitations or Out Of Band to communicate the proof request
  5. URL Deep Link handler: Use c_i format links with full encoded payload, or _url links with a redirect to the payload.
Env Protocol VCauth Version ACA-Py Use OOB Deep Link format
DEV 2.0 main branch code (2.2.0+) 1.0.0 True url
TEST 1.0 2.0.3 0.12.1 False c_i
PROD 1.0 2.0.3 0.12.1 False c_i

TTL Index

Needs to be added to Helm charts. This would result in older mongo records being pruned

bcgov/vc-authn-oidc#539

Back to App link support

To allow calling apps to pass a safe return link there will need to be some additions in the keycloak config.

The back_to_url forwarded query param would need to be added in appropriate keycloak realms.

We control the access-to-court-materials-jag custom realms and could add there.

Some coordination (previously discussed with SSO team) would be needed to add this alongside our pres_req_conf_id param in common SSO setup to allow SSO integrations to use this.

@loneil
Copy link
Author

loneil commented Aug 16, 2024

@esune adding this to DITP repo since it's not code-based (our specific deployments) but could put in VCAuthN instead

@loneil loneil changed the title VCauthN environment setting updates VCauthN environment updates Aug 16, 2024
@esune esune transferred this issue from bcgov/DITP Aug 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Assigned
Development

No branches or pull requests

1 participant