Jack Ussher-Smith
Jack Ussher-Smith
## Problem When certain TTL's expire we revalidate or refresh the session (e.g. https://github.com/buzzfeed/sso/blob/master/internal/proxy/oauthproxy.go#L759-L764), which then ends up **directly** calling the `ValidateGroup` provider method (https://github.com/buzzfeed/sso/blob/master/internal/proxy/providers/sso.go#L381). Because here we're not using...
## Problem We are still calling `ValidateGroup()` directly within `sso_proxy`, but using the options/validator package elsewhere in the same logic path (originally partially due to circular imports). This makes it...
## Problem The current setup of html sign in and sign out pages causes some extra friction with implementing https://github.com/buzzfeed/sso/pull/252 - this change gives us some extra flexibility here. Also,...
## Problem As a follow up to https://github.com/buzzfeed/sso/pull/247, this removes some redundant logic from the sso authenticator, particularly surrounding the `AUTHORIZE_EMAIL_DOMAINS` and `AUTHORIZE_EMAIL_ADDRESSES` configuration variables. ## Solution `AUTHORIZE_EMAIL_ADDRESSES` was only...