🔐 OIDC back-channel logout (#521)

* feat: oidc backchannel session storage
* feat: oidc backchannel logout
* ref: e2e test
* 🛠️ Code review
* ♻️ Do not mock internal auth token but call "/login" with oidc_token instead
* ♻️ Refactoring for back-channel logout test
* fix: feedback and e2e tests
* feat: more e2e tests
* ♻️ Added test to test multiple login requests flow
* ref: jwt sid verifier and e2e tests

---------

Co-authored-by: Monta <monta@HP-ProBook-445-14-inch-G9-Notebook-PC-505aadfc.localdomain>
Co-authored-by: Anton SHEPILOV <ashepilov@linagora.com>
This commit is contained in:
Montassar Ghanmy
2024-05-24 12:52:58 +01:00
committed by GitHub
parent c8a9145906
commit b4412d3ed3
22 changed files with 426 additions and 22 deletions
@@ -554,11 +554,16 @@ export class DocumentsController {
}
await globalResolver.services.companies.setUserRole(document.item.company_id, user.id, "guest");
const token = globalResolver.platformServices.auth.generateJWT(user.id, user.email_canonical, {
track: false,
provider_id: "tdrive",
public_token_document_id: req.body.document_id,
});
const token = globalResolver.platformServices.auth.generateJWT(
user.id,
user.email_canonical,
"",
{
track: false,
provider_id: "tdrive",
public_token_document_id: req.body.document_id,
},
);
return {
access_token: token,