An open discussion list for topics related to the geteduroam service

[Christian Mittring <christian.mittring AT rz.uni-augsburg.de>]

Hello Jørn,

just a short update, we are planing to install our production geteduroam 
portal next week.

We would like to use the code from the beta branch 
(https://github.com/geteduroam/letswifi-portal/tree/beta) with some tiny 
modifications.

1.
To fix some issues with older Linux/Anroid App Versions:
in 
/usr/local/share/letswifi-portal/src/letswifi/credential/certificatecredential.php:

        public function getAnonymousIdentity(): ?string
        {
                return substr($this->credentialId,3);
//              return null;
        }



2.
To avoid App token is longer valid than certificate:
/usr/local/share/letswifi-portal/src/letswifi/auth/authenticationcontext.php

                $this->oauth = new OAuth(
                        $accessTokenSealer,
                        $authorizationCodeSealer,
                        $refreshTokenSealer,
                        new \DateInterval("P7D"),
                );
So oauth token should only work 7 days.

Are these adjustments problematic (especially the short token lifetime)?

Are there any planned releases in the next 2-3 weeks for the 
letswifi-portal, we should wait for?

Thank you



>> 1. Android App in Play Store is very outdated, is there any eta when
>> there will be an update?
>
> We have recently created a new app, it'll be released shortly.

That sounds great, I saw that our problems with the Android app have 
already been solved, that's great, thank you very much.
I think we may start with a larger roullot in August.
Would be very helpful if the updated Android app would be available in 
playstore ;) .

Thanks

Christian Mittring

Universität Augsburg
Rechenzentrum
86135 Augsburg

Telefon 0821/598-2042
christian.mittring AT rz.uni-augsburg.de
https://www.rz.uni-augsburg.de

Am 10.06.2025 um 18:02 schrieb Jørn Åne de Jong (via geteduroam Mailing 
List):
> On 10/06/2025 16:20, Christian Mittring wrote:
> > Hello Jørn,
> >
> > after some addidtional tests I have some more questions and problems 
> > we found:
> >
> > I try to open issues one github to the App related problems.
> >
> > 1. Android App in Play Store is very outdated, is there any eta when 
> > there will be an update?
>
> We have recently created a new app, it'll be released shortly.
>
>
> > 2. Android is showing Linux config option with chrome on the web 
> > interface. This is because of user agent is looking like "... (Linux, 
> > Android ...". I swapped android and linux in branding.conf.php, that 
> > worked.
>
> Yes, we updated the matching regex.
> https://github.com/geteduroam/letswifi-portal/commit/3210ef42199b35b99da
>
>
> > 3. Windows Apps are added to Authorised applications. They seem to 
> > expire after 6 months even if certificate lifetime is much shorter. It 
> > looks like it is possible to renew certificates with the Windows App 
> > without authenticating if the app token is not expired. Would be fine 
> > to have a way to force user reauthentication after certificate lifetime.
> > (Im am not sure uif this is related to: https://github.com/geteduroam/ 
> > windows-app/issues/80)
>
> I think the bug is not related.
> The validity of the refresh token is hardcoded right now, but it will be 
> configurable.  In your case, where you want certificates to expire 
> around the time the new term starts, it would make sense to do the same 
> for the validity time of the refresh token.  I'll send you an update 
> when this has become configurable.
>
> The idea is to later be able to add constraints to refreshing (such as 
> an enrollment check), but we're not there yet.