trustbroker-swiss/xtb-gitops-demo
Watch
2
mirror of https://github.com/trustbroker-swiss/xtb-gitops-demo.git synced 2026-08-26 03:34:17 +00:00
Code Releases Activity
Demo configuration for a localhost setup for a trustbroker.swiss playground | Read-only mirror of https://github.com/trustbroker-swiss/xtb-gitops-demo — Bundesamt für Informatik und Telekommunikation. Issues & pull requests at the source.
26 commits 5 branches 1 tag 130 KiB
  • Groovy 52.4%
  • Python 38.8%
  • Shell 8%
  • CSS 0.8%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
hviten 29dbcc25ed Updated to 1.10.0.20250707T135922Z
2025-07-07 18:08:41 +02:00
trustbroker-inventories/DEMO Updated to 1.10.0.20250707T135922Z 2025-07-07 18:08:41 +02:00
trustbroker-samlmock/DEMO Updated to 1.10.0.20250707T135922Z 2025-07-07 18:08:41 +02:00
LICENSE.txt Initial XTB gitops demo repository for trustbroker-swiss/trustbroker-install/docker compose setup 2024-06-06 08:26:05 +02:00
README.md Updated to 1.10.0.20250707T135922Z 2025-07-07 18:08:41 +02:00
reconfig.sh Initial XTB gitops demo repository for trustbroker-swiss/trustbroker-install/docker compose setup 2024-06-06 08:26:05 +02:00
texts.json Updated to 1.10.0.20250707T135922Z 2025-07-07 18:08:41 +02:00
texts2json.py Drop legacy comment in Python script 2024-07-31 16:52:22 +02:00

README.md

XTB GitOps Demo Repository

This repository provides an initial demo setup federating:

  • trustbroker-samlmock, oidcdebugger.com relying parties with
  • trustbroker-samlmock claims providers here by using the
  • DEMO configuration to configure XTB and
  • providing mock data to play around

It's intended as a lab to experiment with trustbroker.swiss, in short XTB.

The files in here:

Texts

Top-level texts resource allow maintaining translation texts before mapping them into ng-translate resources served via the translation api endpoint of XTB.

Configuration

The trustbroker-inventories directory contains the DEMO configuration selected by SPRING_PROFILES_ACTIVE and containing:

  • ProfileRP pre-configuring RPs that refer to it.
  • SetupRPs are referred to by mock test data (see below) where RelyingParty.id and RelyingParty.Oidc.Client.id mus be unique overall.
  • SetupCPs are simulated IDPs served by the samlmock response data.

Test Data

The trustbroker-samlmock contains the matching test data simulating:

  • SAML request messages simulating relying parties.
  • SAML response messages simulating users in registries of IDPs.

The SAML request data must be exact in addressing the RelyingParty.id.

The OIDC client_id must be exact in addressing the RelyingParty.Oidc.Client.id.

The SAML response data Issuer exactly addresses the ClaimsParty.id used for response processing. With the samlmock is therefore possible to send data of a CP to an RP even though in the federation the setup is not configured or the IDP was not selected on the HRD screen.

Test Data Design

Number-Feature-Message-Summary

  • Number allows ordering messages into test sets (01 SAML normal, 02 SSO, ...)
  • Features identifies what aspect of XTB is covered.
  • Message identifies the type
  • Summary identifies the data without needing to read the verbose SAML

Sets:

  • 01-DEMO: Shows HRD selection and automatic routing
  • 02-SSO: SHows how the SSO feature of XTB works
  • 99-ERROR: PEN testing messages showing error handling and miss-configurations if they work