-
Notifications
You must be signed in to change notification settings - Fork 174
Adding Support For CIBA with RAR #679
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
**Added** - feat: Federated Connections Support [\#682](#682) ([kishore7snehil](https://github.com/kishore7snehil)) - Adding Support For CIBA with RAR [\#679](#679) ([kishore7snehil](https://github.com/kishore7snehil))
### Changes - Added support for Rich Authorization Request in CIBA. ### References - [Open ID](https://openid.net/specs/openid-client-initiated-backchannel-authentication-core-1_0.html) - [User Authentication with CIBA](https://auth0.com/docs/get-started/authentication-and-authorization-flow/client-initiated-backchannel-authentication-flow/user-authentication-with-ciba) - [Configure Client-Initiated Backchannel Authentication](https://auth0.com/docs/get-started/applications/configure-client-initiated-backchannel-authentication#integrate-guardian-sdk-into-your-application) ### Testing - [x] This change adds test coverage - [x] This change has been tested on the latest version of the platform/language or why not ### Contributor Checklist - [x] I agree to adhere to the [Auth0 General Contribution Guidelines](https://github.com/auth0/open-source-template/blob/master/GENERAL-CONTRIBUTING.md). - [x] I agree to uphold the [Auth0 Code of Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md). --------- Co-authored-by: Kunal Dawar <[email protected]>
**Added** - feat: Federated Connections Support [\auth0#682](auth0#682) ([kishore7snehil](https://github.com/kishore7snehil)) - Adding Support For CIBA with RAR [\auth0#679](auth0#679) ([kishore7snehil](https://github.com/kishore7snehil))
authorization_details=[ | ||
{ | ||
"type":"payment_initiation","locations":["https://example.com/payments"], | ||
"instructedAmount": | ||
{ | ||
"currency":"EUR","amount":"123.50" | ||
}, | ||
"creditorName":"Merchant A", | ||
"creditorAccount": | ||
{ | ||
"bic":"ABCIDEFFXXX", | ||
"iban":"DE021001001093071118603" | ||
}, | ||
"remittanceInformationUnstructured":"Ref Number Merchant" | ||
} | ||
], |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@kishore7snehil this won't work in a real scenario, because the request content-type is application/x-www-form-urlencoded
So, in order to support RAR, the back_channel_login
should convert the authorization_details value to string (eg, json.dumps(authorization_details)
) before include it as part of the authenticated_post
data.
Changes
References
Open ID
User Authentication with CIBA
Configure Client-Initiated Backchannel Authentication
Testing
This change adds test coverage
This change has been tested on the latest version of the platform/language or why not
Contributor Checklist