diff --git a/app/forms/openid_connect_authorize_form.rb b/app/forms/openid_connect_authorize_form.rb index 1fe9f08b782..2a7ddf1744e 100644 --- a/app/forms/openid_connect_authorize_form.rb +++ b/app/forms/openid_connect_authorize_form.rb @@ -315,7 +315,12 @@ def sp_defaults_to_identity_proofing? end def identity_proofing_requested? - requested_authn_context.identity_proofing? + if parsed_vectors_of_trust.present? + parsed_vectors_of_trust.any?(&:identity_proofing?) + else + Vot::AcrComponentValues. + includes_requirements?(highest_level_ial, :identity_proofing) + end end def identity_proofing_service_provider? @@ -327,11 +332,11 @@ def ialmax_allowed_for_sp? end def ialmax_requested? - requested_authn_context.ialmax? + Vot::AcrComponentValues.includes_requirements?(highest_level_ial, :ialmax) end def biometric_ial_requested? - requested_authn_context.biometric_comparison? + Vot::AcrComponentValues.includes_requirements?(highest_level_ial, :biometric_comparison) end def highest_level_ial @@ -350,7 +355,7 @@ def request_authn_context_resolver @request_authn_context_resolver ||= AuthnContextResolver.new( service_provider: service_provider, user: nil, - vtr: parsed_vectors_of_trust.present? && vtr, + vtr: nil, acr_values: acr_values, ) end