feat(jans-auth): update SG script to conform API

[yurem]

closes #9540

• I confirm that there is no impact on the docs due to the code changes in this PR.

[dryrunsecurity]

DryRun Security Summary

The code changes in this pull request are part of the Super-Gluu external authenticator for the Janssen Project, focusing on secure communication, credential management, user access control, and logging capabilities to enhance the overall security posture of the application.

Expand for full summary

Summary:

The code changes in this pull request are part of the Super-Gluu external authenticator for the Janssen Project. The code focuses on handling the authentication flow for the Super-Gluu authentication method, which can be configured to use either a one-step or two-step authentication process. From an application security perspective, the code includes several security-focused features and practices, such as:

1. Secure communication using HTTPS to prevent eavesdropping or man-in-the-middle attacks.
2. Dynamic client registration to obtain a unique client ID and secret, which are securely stored in the custom script configuration.
3. Support for push notifications with appropriate security measures based on the device platform and configured settings.
4. User group validation to restrict the Super-Gluu authentication method to users who belong to a specific group, enforcing access control.
5. Audit logging to log user login events, enabling security auditing and monitoring.
6. Secure session management to maintain the state of the authentication flow and prevent potential security issues.

Overall, the code appears to have a strong focus on security, with measures in place to ensure secure communication, credential management, user access control, and logging capabilities. These security-focused features and practices help to enhance the overall security posture of the application.

Files Changed:

• docs/script-catalog/person_authentication/super-gluu-external-authenticator/SuperGluuExternalAuthenticator.py: This file contains the code for the Super-Gluu external authenticator, which handles the authentication flow for the Super-Gluu authentication method. The code includes various security-focused features and practices, as described in the summary above.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[sonarcloud]

Quality Gate passed for 'jans-cli'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud