[TAN-2156] Nemlog-in authentication

[alexander-cit]

trafficstars

Changelog

Added

• CL-3499 Nemlog-in authentication

[cl-dev-bot]

	Messages
:book:	Changelog provided 🎉
:book:	Jira issue: CL-3499
:book:	Run the e2e tests
:book:	Check translation progress

Generated by :no_entry_sign: dangerJS against ce1def06fcd43b7413604c83858a7aaf18af697a

[alexander-cit]

Before we start working on it, we need to have another test SP, that we can use for logout.

• After logout on SP, we redirect to SingleLogoutService in IdP metadata
• After logout on IdP, we get redirect (see https://digst.dk/media/25785/oiosaml-web-sso-profile-303.pdf, "SPs MUST support the HTTP-Redirect or HTTP-POST [SAML2Bind] binding for the receipt of samlp:LogoutRequest messages from the IdP") and remove cookies. We may need to use this trick to access them https://github.com/CitizenLabDotCo/citizenlab/blob/84ac2135baa3c49a0993c4d65fa0d6d50ad22bf9/back/engines/commercial/id_nemlog_in/app/lib/id_nemlog_in/nemlog_in_omniauth.rb#L84

[notion-workspace[bot]]

Simplify flow for Nemlog-in (MitID) verification

[alexander-cit]

Not very important now. If we need to implement it, see more details here https://www.notion.so/govocal/Simplify-flow-for-Nemlog-in-MitID-verification-e505e973ad254dbaa7d41be4f627b5b4?pvs=4#4dd133c7b8e7427d81f1beba8d90c637