Commit 0313674

@@ -1,1 +0,0 @@
-config.yml

@@ -1,12 +0,0 @@
-# SAML IdP
-
-This is a tiny SAML Identity Provider for testing out interactions with
-a SAML Service Provider
-
-## Getting Started
-
-1. Start the server:
-
-    $ ruby main.rb
-
-1. Use `http://localhost:8282/metadata.xml` as your SAML IdP Metadata url.

@@ -1,16 +0,0 @@
-# SAML SP
-
-This is a tiny SAML Service Provider for testing out interactions with
-a SAML Identity Provider (IdP)
-
-## Getting Started
-
-1. Start the server:
-
-    $ ruby main.rb
-
-1. Start ngrok
-
-    $ ngrok http 8283
-
-1. Use `https://<xxxx>.ngrok.io/metadata.xml` as your SAML SP Metadata url.

@@ -0,0 +1,42 @@
+# Spike
+
+1. Thrift + GRPC
+  1. idp (headless)
+    * provide a thrift/grpc endpoint that is the equivalent of `Ability.allowed?(subject, permission, resource)`
+  1. gitlab
+2. OpenID Connect + OAuth
+  * two services
+    1. idp (with login pages)
+      * user
+      * member
+      * `member_role`
+    1. gitlab
+      * groups
+      * project
+  * OpenID transaction to provide authn information to `gitlab-org/gitlab`
+  * OAuth token introspection endpoint to provide token permissions
+3. API Gateway
+  * using golang reverse proxy and one of the new policy dsl's
+4. OPA agent style side car using declarative policy
+
+
+## Identity Provider (SAML IdP)
+
+This is a tiny SAML Identity Provider for testing out interactions with
+a SAML Service Provider
+
+1. Start the server:
+
+    $ ruby ./bin/idp
+
+1. Use `http://localhost:8282/metadata.xml` as your SAML IdP Metadata url.
+
+## Service Provider (SAML SP)
+
+This is a tiny SAML Service Provider for testing out interactions with a SAML Identity Provider (IdP)
+
+1. Start the server:
+
+    $ ruby ./bin/sp
+
+1. Use `http://localhost:8283/metadata.xml` as your SAML SP Metadata url.