Uploaded image for project: 'Identity Gateway'
  1. Identity Gateway
  2. OPENIG-3197

Adding agent token to getSessionInfo request removes the need to update Session Property Whitelist on AM

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 6.0.0, 6.1.0, 6.5.0
    • Fix Version/s: 7.0.0-micsvc-1.0.0, 6.5.5, 7.0.0
    • Component/s: OpenAM
    • Labels:
      None
    • Environment:
      IG making requests on AM to retrieve SSO token properties using the SessionInfoFilter
    • Sprint:
      OpenIG Sprint 138 (7.0 init), OpenIG Sprint 139, OpenIG Sprint 140 (xmas), OpenIG Sprint 141
    • Story Points:
      2

      Description

      Since AME-12966 (since AM 5.0.0) there has been support for the AM getSessionInfo requests to include the agent token along with the user token which bypasses the need to update the Session Property Whitelist for each session attribute to include in the amSession.properties context.

      The behaviour when using the agent token/user token combination is for all the user's session attributes to be returned regardless of the values in the Session Properties Whitelist.

      If sub-sets of values are required then the _fields parameter can be used to limit the values returned.

      This would reduce the steps required when making use of the SessionInfoFilter

      Note: OPENAM-9258 (since AM 5.5.0) added the ability to send the user token in the POST body as JSON rather than as a query parameter which would be the preferred approach to use.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              markdr Mark de Reeper
              Reporter:
              markdr Mark de Reeper
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: