mirror of
https://mau.dev/maunium/synapse.git
synced 2024-07-17 00:22:17 +00:00
789d9ebad3
If we have integrations with multiple identity providers, when the user does a UI Auth, we need to redirect them to the right one. There are a few steps to this. First of all we actually need to store the userid of the user we are trying to validate in the UIA session, since the /auth/sso/fallback/web request is unauthenticated. Then, once we get the /auth/sso/fallback/web request, we can fish the user id out of the session, and use it to look up the external id mappings, and hence pick an SSO provider for them.
38 lines
1.3 KiB
Python
38 lines
1.3 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Copyright 2019 The Matrix.org Foundation C.I.C.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
"""This module implements user-interactive auth verification.
|
|
|
|
TODO: move more stuff out of AuthHandler in here.
|
|
|
|
"""
|
|
|
|
from synapse.handlers.ui_auth.checkers import INTERACTIVE_AUTH_CHECKERS # noqa: F401
|
|
|
|
|
|
class UIAuthSessionDataConstants:
|
|
"""Constants for use with AuthHandler.set_session_data"""
|
|
|
|
# used during registration and password reset to store a hashed copy of the
|
|
# password, so that the client does not need to submit it each time.
|
|
PASSWORD_HASH = "password_hash"
|
|
|
|
# used during registration to store the mxid of the registered user
|
|
REGISTERED_USER_ID = "registered_user_id"
|
|
|
|
# used by validate_user_via_ui_auth to store the mxid of the user we are validating
|
|
# for.
|
|
REQUEST_USER_ID = "request_user_id"
|