Infrastructure/logto
0
Fork 0
mirror of https://github.com/logto-io/logto.git synced 2024-12-16 20:26:19 -05:00
Code Issues Activity

feat(core,console,schemas): add idp-initiated sso session create log (#6743)

Browse source 
add idp-initiated sso session create log
This commit is contained in:
simeng-li 2024-10-24 17:56:49 +08:00 committed by GitHub
parent 5bb9375055
commit f2d280466d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
packages/console/src/consts/logs.ts
View file

@ -104,6 +104,8 @@ export const auditLogEventTitle: Record<string, Optional<string>> & {
'Create and send forgot-password SMS verification code',
'Interaction.ForgotPassword.Verification.SmsVerificationCode.Submit':
'Verify forgot-password SMS verification code',
'Interaction.SignIn.Verification.IdpInitiatedSso.Create':
'Create IdP-initiated SAML SSO authentication session',
});
export const logEventTitle: Record<string, Optional<string>> & {

9
packages/core/src/routes/authn.ts
View file

@ -18,6 +18,7 @@ import {
import { idpInitiatedSamlSsoSessionCookieName } from '../constants/index.js';
import { EnvSet } from '../env-set/index.js';
import koaAuditLog from '../middleware/koa-audit-log.js';
import { ssoPath } from './interaction/const.js';
import type { AnonymousRouter, RouterInitArgs } from './types.js';
@ -183,6 +184,7 @@ export default function authnRoutes<T extends AnonymousRouter>(
params: z.object({ connectorId: z.string().min(1) }),
status: [302, 400, 404],
}),
koaAuditLog(queries),
async (ctx, next) => {
const {
params: { connectorId },
@ -237,6 +239,13 @@ export default function authnRoutes<T extends AnonymousRouter>(
const { autoSendAuthorizationRequest, clientIdpInitiatedAuthCallbackUri } =
idpInitiatedAuthConfig;
const log = ctx.createLog('Interaction.SignIn.Verification.IdpInitiatedSso.Create');
log.append({
connectorId,
ssoSessionId: id,
assertionContent,
});
// Redirect to the client side callback URI if the autoSendAuthorizationRequest is disabled.
// Client side will generate and verify the state to prevent CSRF attack.
if (!autoSendAuthorizationRequest) {

4
packages/schemas/src/types/log/interaction.ts
View file

@ -96,4 +96,6 @@ export type LogKey =
| Action.Submit
| Action.Create}`
| `${Prefix}.${InteractionEvent}.${Field.Verification}.${VerificationType}.${Action}`
| `${Prefix}.${InteractionEvent}.${Field.Identifier}.${Action.Submit}`;
| `${Prefix}.${InteractionEvent}.${Field.Identifier}.${Action.Submit}`
// IdpInitiatedSingleSignOn log, used upon receiving a SAML request from the IdP
| `${Prefix}.${InteractionEvent.SignIn}.${Field.Verification}.IdpInitiatedSso.${Action.Create}`;