OpenID Connect Session Management 1.0

[dopry]

Implement OpenID Connect Session Management

• add chcek_session end point per Section 3.2
• add check_session_iframe to discovery metadata per Section 3.3

[lullis]

I am tasked with implementing Session Management for the work on Aleksis. I am going to open a draft PR soon, because I'd like to have some help because:

• tests are missing.
• I am not really sure what is needed to do to run the test project locally. Should I simply run the django project configured tests ?

[lullis]

@dopry, I am getting back to this now and I would like to complete #1543 soon. At the moment, the thing I am in most need of help is in figuring out what is the best testing strategy. Should I make any changes top that Svelte project to make tests for session management, or is there any other approach you'd recommend?

[dopry]

Testing OIDC sessions has always been a challenging task. I would strongly recommend using playwright to test. IIRC the oidc-client used in my svelte-oidc library already supports session management. Alternatively you may be able to work something out with request.session to test things. The hardest thing to test is going to be the postMessage activity. Let me know if that helps. Happy to try to setup a time to discuss.