ThePalaceProject / web-patron
77%

DEFAULT BRANCH: main
Repo Added
Token NYLsywhVCNMt2ofO8m0o4lOLYk8jtzujj regen
Build 193 Last
Files 1
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: main
CHANGE BRANCH
x
Sync Branches

coverage: 77.108%. Remained the same
20721882785

push

github

web-flow 
Show warning page after SAML/Clever sign out (PP-3423) (#88)

## Description

When a SAML- or Clever-authenticated user signs out, they are are
redirected to a sign out warning page that instructs them to close their
browser to fully logout. This page also explains the security (and
other) implications of not doing so.

Notes: 
- Completing the logout requires user action (closing the browser) and
cannot currently be accomplished automatically.
- I did not have a way to verify either the problem or the solution for
Clever authentication, but the authorization handlers appeared similar
enough that I figured these changes would leave us at a good starting
point when we do need to address Clever auth.

## Motivation and Context

No Warning About IdP Session Persistence:
- Users weren't informed that signing out of the app doesn't sign them
out of the identity provider.
- On shared computers, another person could be auto-signed into the
authenticated users account without needing to provide credentials.
    - This is a serious security issue on shared/public computers.

[Jira PP-3423]

## How Has This Been Tested?

- Manually tested in local development environment.
- All checks pass locally.
- [CI
checks](https://github.com/ThePalaceProject/web-patron/actions/runs/20624808600)
pass.

## Checklist:

- N/A I have updated the documentation accordingly.
- [x] All new and existing tests passed.

57 of 74 branches covered (77.03%)

Branch coverage included in aggregate %.

71 of 92 relevant lines covered (77.17%)

11.84 hits per line

Relevant lines Covered
92 RELEVANT LINES 71 COVERED LINES
11.84 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
20721882785 main Show warning page after SAML/Clever sign out (PP-3423) (#88) ## Description When a SAML- or Clever-authenticated user signs out, they are are redirected to a sign out warning page that instructs them to close their browser to fully logout. This ... push web-flow github
77.11
20477333538 main Show error and prevent loop for SAML sign on failure (PP-3392) (#86) ## Description - Prevents a infinite loop during SAML sign on if the Palace Manager is unable to extract a unique patron authorization identifier from the SAML Subject assertio... push web-flow github
77.11
20443110506 main Bump next from 15.4.9 to 15.4.10 (#87) Bumps [next](https://github.com/vercel/next.js) from 15.4.9 to 15.4.10. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">next's releases</a>... push web-flow github
77.11
20442849920 main Bump storybook from 8.6.12 to 8.6.15 (#85) Bumps [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) from 8.6.12 to 8.6.15. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/storybook... push web-flow github
77.11
20085725313 main Show error message for BasicTokenAuth login failure (PP-3391) (#83) ## Description Catch and display errors during basic-token authentication, with UX similar to that of Basic authentication. ## Motivation and Context Before this change, error... push web-flow github
77.11
19990871948 main Bump next from 15.4.7 to 15.4.8 (#81) Bumps [next](https://github.com/vercel/next.js) from 15.4.7 to 15.4.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">next's releases</a>.<... push web-flow github
77.11
19896957844 main Display library list in ascending title order (PP-3349) (#80) ## Description Sorts the library list in ascending order by "effective title" (the title, if present, otherwise the slug) on the home page. ## Motivation and Context It is more chal... push web-flow github
77.11
19473447745 main Bump js-yaml (#78) Bumps and [js-yaml](https://github.com/nodeca/js-yaml). These dependencies needed to be updated together. Updates `js-yaml` from 3.14.1 to 3.14.2 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://githu... push web-flow github
77.11
19433711261 main Drop leading slash in home page library links (#77) ## Description - Removes leading slash from home page library link text. - Defaults link text to the slug, if the title is missing. - Adds some tests. ## Motivation and Context It is pointles... push web-flow github
77.11
19399913284 main Libraries configuration enhancements (PP-3113) (#76) ## Description - Adds explicit support for configuration of `registries` (build-time only for now). - Enhanced "static" `libraries` configuration to support two intermixable formats: - Simpl... push web-flow github
77.11
See All Builds (191)

Badge your Repo: web-patron

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh