From 6192b5e1c7bd1afbf04ef8f1c12170275adb3c9f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20MORI?= Date: Mon, 26 Jul 2021 14:22:12 +0200 Subject: [PATCH] Allow to configure SAML auth acceptedClockSkewMs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Stéphane MORI --- plugins/auth-backend/config.d.ts | 1 + plugins/auth-backend/src/providers/saml/provider.ts | 1 + 2 files changed, 2 insertions(+) diff --git a/plugins/auth-backend/config.d.ts b/plugins/auth-backend/config.d.ts index e9f24382d9..537999b694 100644 --- a/plugins/auth-backend/config.d.ts +++ b/plugins/auth-backend/config.d.ts @@ -53,6 +53,7 @@ export interface Config { decryptionPvk?: string; signatureAlgorithm?: 'sha256' | 'sha512'; digestAlgorithm?: string; + acceptedClockSkewMs: number; }; okta?: { [authEnv: string]: { [key: string]: string }; diff --git a/plugins/auth-backend/src/providers/saml/provider.ts b/plugins/auth-backend/src/providers/saml/provider.ts index fa8519ea1a..fe721fa376 100644 --- a/plugins/auth-backend/src/providers/saml/provider.ts +++ b/plugins/auth-backend/src/providers/saml/provider.ts @@ -132,6 +132,7 @@ export const createSamlProvider = ( | SignatureAlgorithm | undefined, digestAlgorithm: config.getOptionalString('digestAlgorithm'), + acceptedClockSkewMs: config.getOptionalNumber('acceptedClockSkewMs'), tokenIssuer, appUrl: globalConfig.appUrl,