{"action":"created","issue":{"url":"https://api.github.com/repos/department-of-veterans-affairs/vets-website/issues/3572","repository_url":"https://api.github.com/repos/department-of-veterans-affairs/vets-website","labels_url":"https://api.github.com/repos/department-of-veterans-affairs/vets-website/issues/3572/labels{/name}","comments_url":"https://api.github.com/repos/department-of-veterans-affairs/vets-website/issues/3572/comments","events_url":"https://api.github.com/repos/department-of-veterans-affairs/vets-website/issues/3572/events","html_url":"https://github.com/department-of-veterans-affairs/vets-website/issues/3572","id":185774649,"number":3572,"title":"Consume Encrypted SAML Changes","user":{"login":"omgitsbillryan","id":3077884,"avatar_url":"https://avatars.githubusercontent.com/u/3077884?v=3","gravatar_id":"","url":"https://api.github.com/users/omgitsbillryan","html_url":"https://github.com/omgitsbillryan","followers_url":"https://api.github.com/users/omgitsbillryan/followers","following_url":"https://api.github.com/users/omgitsbillryan/following{/other_user}","gists_url":"https://api.github.com/users/omgitsbillryan/gists{/gist_id}","starred_url":"https://api.github.com/users/omgitsbillryan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/omgitsbillryan/subscriptions","organizations_url":"https://api.github.com/users/omgitsbillryan/orgs","repos_url":"https://api.github.com/users/omgitsbillryan/repos","events_url":"https://api.github.com/users/omgitsbillryan/events{/privacy}","received_events_url":"https://api.github.com/users/omgitsbillryan/received_events","type":"User","site_admin":false},"labels":[{"id":389890816,"url":"https://api.github.com/repos/department-of-veterans-affairs/vets-website/labels/in%20progress","name":"in progress","color":"ededed","default":false}],"state":"open","locked":false,"assignee":{"login":"omgitsbillryan","id":3077884,"avatar_url":"https://avatars.githubusercontent.com/u/3077884?v=3","gravatar_id":"","url":"https://api.github.com/users/omgitsbillryan","html_url":"https://github.com/omgitsbillryan","followers_url":"https://api.github.com/users/omgitsbillryan/followers","following_url":"https://api.github.com/users/omgitsbillryan/following{/other_user}","gists_url":"https://api.github.com/users/omgitsbillryan/gists{/gist_id}","starred_url":"https://api.github.com/users/omgitsbillryan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/omgitsbillryan/subscriptions","organizations_url":"https://api.github.com/users/omgitsbillryan/orgs","repos_url":"https://api.github.com/users/omgitsbillryan/repos","events_url":"https://api.github.com/users/omgitsbillryan/events{/privacy}","received_events_url":"https://api.github.com/users/omgitsbillryan/received_events","type":"User","site_admin":false},"assignees":[{"login":"omgitsbillryan","id":3077884,"avatar_url":"https://avatars.githubusercontent.com/u/3077884?v=3","gravatar_id":"","url":"https://api.github.com/users/omgitsbillryan","html_url":"https://github.com/omgitsbillryan","followers_url":"https://api.github.com/users/omgitsbillryan/followers","following_url":"https://api.github.com/users/omgitsbillryan/following{/other_user}","gists_url":"https://api.github.com/users/omgitsbillryan/gists{/gist_id}","starred_url":"https://api.github.com/users/omgitsbillryan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/omgitsbillryan/subscriptions","organizations_url":"https://api.github.com/users/omgitsbillryan/orgs","repos_url":"https://api.github.com/users/omgitsbillryan/repos","events_url":"https://api.github.com/users/omgitsbillryan/events{/privacy}","received_events_url":"https://api.github.com/users/omgitsbillryan/received_events","type":"User","site_admin":false},{"login":"crwallace","id":3453669,"avatar_url":"https://avatars.githubusercontent.com/u/3453669?v=3","gravatar_id":"","url":"https://api.github.com/users/crwallace","html_url":"https://github.com/crwallace","followers_url":"https://api.github.com/users/crwallace/followers","following_url":"https://api.github.com/users/crwallace/following{/other_user}","gists_url":"https://api.github.com/users/crwallace/gists{/gist_id}","starred_url":"https://api.github.com/users/crwallace/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/crwallace/subscriptions","organizations_url":"https://api.github.com/users/crwallace/orgs","repos_url":"https://api.github.com/users/crwallace/repos","events_url":"https://api.github.com/users/crwallace/events{/privacy}","received_events_url":"https://api.github.com/users/crwallace/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2016-10-27T20:41:08Z","updated_at":"2016-11-02T12:00:40Z","closed_at":null,"body":"### Context\r\n\r\n`vets-api` has an [open PR](https://github.com/department-of-veterans-affairs/vets-api/pull/355) to consume encrypted SAML assertions from ID.me.  Until the front-end consumes these changes, this PR may not be merged.\r\n### Vets-api Changes\r\n- Calls to `/session/new` can optionally now include a `location` query param (ex. `/session/new?location=/some/resource`).  `location` represents where the browser will be rediected on vets.gov once autentication is complete.  `location`: _must_ begin with a forward slash / and _must_ only contain the following characters (separates by pipes) a-z | A-Z | 0-9 | _ | - | / .  An invalid `location` will default to `/profile`.\r\n- `token` is returned as url query param once auth is complete and vets-api has validates the ID.me SAML Assertion.  Ex. `302 http://www.vets.gov/profile?token=abcd1234`\r\n\r\nFor more info, see [the design doc](https://github.com/department-of-veterans-affairs/platform-team/blob/encrypred-saml-doc-update/identity/authentication_and_authorization.md)\r\n### To be done\r\n- [x] Update auth calls to include `location` param where necessary / desired\r\n- [x] Fetch token from url query param `token`\r\n- [x] Notify Bill Ryan where authentication failures should be redirected to\r\n- [x] Notify Bill Ryan when front-end work is ready to be merged to master\r\n"},"comment":{"url":"https://api.github.com/repos/department-of-veterans-affairs/vets-website/issues/comments/257845143","html_url":"https://github.com/department-of-veterans-affairs/vets-website/issues/3572#issuecomment-257845143","issue_url":"https://api.github.com/repos/department-of-veterans-affairs/vets-website/issues/3572","id":257845143,"user":{"login":"crwallace","id":3453669,"avatar_url":"https://avatars.githubusercontent.com/u/3453669?v=3","gravatar_id":"","url":"https://api.github.com/users/crwallace","html_url":"https://github.com/crwallace","followers_url":"https://api.github.com/users/crwallace/followers","following_url":"https://api.github.com/users/crwallace/following{/other_user}","gists_url":"https://api.github.com/users/crwallace/gists{/gist_id}","starred_url":"https://api.github.com/users/crwallace/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/crwallace/subscriptions","organizations_url":"https://api.github.com/users/crwallace/orgs","repos_url":"https://api.github.com/users/crwallace/repos","events_url":"https://api.github.com/users/crwallace/events{/privacy}","received_events_url":"https://api.github.com/users/crwallace/received_events","type":"User","site_admin":false},"created_at":"2016-11-02T12:00:40Z","updated_at":"2016-11-02T12:00:40Z","body":"@omgitsbillryan -- We are complete on this correct?"}}
{"actor":{"display_login":"crwallace"}}