- From: Christian Mittring <christian.mittring AT rz.uni-augsburg.de>
- To: Jørn Åne de Jong <jornane.dejong AT surf.nl>, geteduroam AT lists.geant.org
- Subject: Re: letswifi-portal modifications
- Date: Tue, 1 Jul 2025 07:56:23 +0200
Hello Jørn,
just a short update, we are planing to install our production geteduroam
portal next week.
We would like to use the code from the beta branch
(
https://github.com/geteduroam/letswifi-portal/tree/beta) with some tiny
modifications.
1.
To fix some issues with older Linux/Anroid App Versions:
in
/usr/local/share/letswifi-portal/src/letswifi/credential/certificatecredential.php:
public function getAnonymousIdentity(): ?string
{
return substr($this->credentialId,3);
// return null;
}
2.
To avoid App token is longer valid than certificate:
/usr/local/share/letswifi-portal/src/letswifi/auth/authenticationcontext.php
$this->oauth = new OAuth(
$accessTokenSealer,
$authorizationCodeSealer,
$refreshTokenSealer,
new \DateInterval("P7D"),
);
So oauth token should only work 7 days.
Are these adjustments problematic (especially the short token lifetime)?
Are there any planned releases in the next 2-3 weeks for the
letswifi-portal, we should wait for?
Thank you
>> 1. Android App in Play Store is very outdated, is there any eta when
>> there will be an update?
>
> We have recently created a new app, it'll be released shortly.
That sounds great, I saw that our problems with the Android app have
already been solved, that's great, thank you very much.
I think we may start with a larger roullot in August.
Would be very helpful if the updated Android app would be available in
playstore ;) .
Thanks
Christian Mittring
Universität Augsburg
Rechenzentrum
86135 Augsburg
Telefon 0821/598-2042
christian.mittring AT rz.uni-augsburg.de
https://www.rz.uni-augsburg.de
Am 10.06.2025 um 18:02 schrieb Jørn Åne de Jong (via geteduroam Mailing
List):
On 10/06/2025 16:20, Christian Mittring wrote:
Hello Jørn,
after some addidtional tests I have some more questions and problems
we found:
I try to open issues one github to the App related problems.
1. Android App in Play Store is very outdated, is there any eta when
there will be an update?
We have recently created a new app, it'll be released shortly.
2. Android is showing Linux config option with chrome on the web
interface. This is because of user agent is looking like "... (Linux,
Android ...". I swapped android and linux in branding.conf.php, that
worked.
Yes, we updated the matching regex.
https://github.com/geteduroam/letswifi-portal/commit/3210ef42199b35b99da
3. Windows Apps are added to Authorised applications. They seem to
expire after 6 months even if certificate lifetime is much shorter. It
looks like it is possible to renew certificates with the Windows App
without authenticating if the app token is not expired. Would be fine
to have a way to force user reauthentication after certificate lifetime.
(Im am not sure uif this is related to: https://github.com/geteduroam/
windows-app/issues/80)
I think the bug is not related.
The validity of the refresh token is hardcoded right now, but it will be
configurable. In your case, where you want certificates to expire
around the time the new term starts, it would make sense to do the same
for the validity time of the refresh token. I'll send you an update
when this has become configurable.
The idea is to later be able to add constraints to refreshing (such as
an enrollment check), but we're not there yet.
-
Re: letswifi-portal modifications,
Christian Mittring, 07/01/2025
Archive powered by MHonArc 2.6.24.
