Skip to Content.
Sympa Menu

geteduroam - Re: letswifi-portal modifications

Subject: An open discussion list for topics related to the geteduroam service

List archive

Chronological Thread  
  • From: Christian Mittring <christian.mittring AT rz.uni-augsburg.de>
  • To: Jørn Åne de Jong <jornane.dejong AT surf.nl>, geteduroam AT lists.geant.org
  • Subject: Re: letswifi-portal modifications
  • Date: Tue, 1 Jul 2025 07:56:23 +0200

Hello Jørn,

just a short update, we are planing to install our production geteduroam portal next week.

We would like to use the code from the beta branch (https://github.com/geteduroam/letswifi-portal/tree/beta) with some tiny modifications.

1.
To fix some issues with older Linux/Anroid App Versions:
in /usr/local/share/letswifi-portal/src/letswifi/credential/certificatecredential.php:

public function getAnonymousIdentity(): ?string
{
return substr($this->credentialId,3);
// return null;
}



2.
To avoid App token is longer valid than certificate:
/usr/local/share/letswifi-portal/src/letswifi/auth/authenticationcontext.php

$this->oauth = new OAuth(
$accessTokenSealer,
$authorizationCodeSealer,
$refreshTokenSealer,
new \DateInterval("P7D"),
);
So oauth token should only work 7 days.

Are these adjustments problematic (especially the short token lifetime)?

Are there any planned releases in the next 2-3 weeks for the letswifi-portal, we should wait for?

Thank you



>> 1. Android App in Play Store is very outdated, is there any eta when
>> there will be an update?
>
> We have recently created a new app, it'll be released shortly.

That sounds great, I saw that our problems with the Android app have already been solved, that's great, thank you very much.
I think we may start with a larger roullot in August.
Would be very helpful if the updated Android app would be available in playstore ;) .

Thanks

Christian Mittring

Universität Augsburg
Rechenzentrum
86135 Augsburg

Telefon 0821/598-2042
christian.mittring AT rz.uni-augsburg.de
https://www.rz.uni-augsburg.de

Am 10.06.2025 um 18:02 schrieb Jørn Åne de Jong (via geteduroam Mailing List):
On 10/06/2025 16:20, Christian Mittring wrote:
Hello Jørn,

after some addidtional tests I have some more questions and problems we found:

I try to open issues one github to the App related problems.

1. Android App in Play Store is very outdated, is there any eta when there will be an update?

We have recently created a new app, it'll be released shortly.


2. Android is showing Linux config option with chrome on the web interface. This is because of user agent is looking like "... (Linux, Android ...". I swapped android and linux in branding.conf.php, that worked.

Yes, we updated the matching regex.
https://github.com/geteduroam/letswifi-portal/commit/3210ef42199b35b99da


3. Windows Apps are added to Authorised applications. They seem to expire after 6 months even if certificate lifetime is much shorter. It looks like it is possible to renew certificates with the Windows App without authenticating if the app token is not expired. Would be fine to have a way to force user reauthentication after certificate lifetime.
(Im am not sure uif this is related to: https://github.com/geteduroam/ windows-app/issues/80)

I think the bug is not related.
The validity of the refresh token is hardcoded right now, but it will be configurable.  In your case, where you want certificates to expire around the time the new term starts, it would make sense to do the same for the validity time of the refresh token.  I'll send you an update when this has become configurable.

The idea is to later be able to add constraints to refreshing (such as an enrollment check), but we're not there yet.




  • Re: letswifi-portal modifications, Christian Mittring, 07/01/2025

Archive powered by MHonArc 2.6.24.

Top of Page