Skip to content

Conversation

@ywangd
Copy link
Member

@ywangd ywangd commented Jun 10, 2021

Both SAML complete logout and SAML invalidate session APIs use a camelCase request parameter, queryString, while the convention is to use snake_case parameters. This PR deprecates queryString and replaces it with query_string. It is an error to if a request specifies both of them.

Resolves: #73543

@ywangd ywangd added >deprecation :Security/Security Security issues without another label v8.0.0 v7.14.0 labels Jun 10, 2021
@ywangd ywangd requested a review from tvernum June 10, 2021 06:17
@elasticmachine elasticmachine added the Team:Security Meta label for security team label Jun 10, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@tvernum
Copy link
Contributor

tvernum commented Jun 10, 2021

Ping @elastic/kibana-security.

We're considering deprecating the current parameter you use, and switching it to snake_case.
I think we should coordinate changes, so that you can update the Kibana code in the same release and customers don't see deprecation warnings.

@azasypkin
Copy link
Member

Thanks for the ping. Sure, we'll track this PR and update Kibana code base for 7.14 as soon as updated ES snapshot reaches our CI.

ywangd and others added 2 commits June 22, 2021 21:13
…ecurity/rest/action/saml/RestSamlCompleteLogoutAction.java

Co-authored-by: Tim Vernum <[email protected]>
@ywangd
Copy link
Member Author

ywangd commented Jun 22, 2021

@elasticmachine update branch

@ywangd ywangd requested a review from tvernum June 23, 2021 00:40
Copy link
Contributor

@tvernum tvernum left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ywangd ywangd merged commit 7257dc6 into elastic:master Jun 23, 2021
ywangd added a commit to ywangd/elasticsearch that referenced this pull request Jun 23, 2021
Both SAML complete logout and SAML invalidate session APIs use a camelCase
request parameter, queryString, while the convention is to use snake_case
parameters. This PR deprecates queryString and replaces it with query_string.
It is an error to if a request specifies both of them.
ywangd added a commit that referenced this pull request Jun 23, 2021
Both SAML complete logout and SAML invalidate session APIs use a camelCase
request parameter, queryString, while the convention is to use snake_case
parameters. This PR deprecates queryString and replaces it with query_string.
It is an error to if a request specifies both of them.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

>deprecation :Security/Security Security issues without another label Team:Security Meta label for security team v7.14.0 v8.0.0-alpha1

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SAML complete logout API has a camel case request parameter

5 participants