Skip to content

Incorrect Policy Type for Post Authentication Sessions (POST_AUTH_SESSION vs. CONTINUOUS_ACCESS) #508

@ozan-backupta

Description

@ozan-backupta

Describe the bug?

The Open API specification file okta-management-APIs-oasv3-noEnums-inheritance.yaml included in the latest Okta GO SDK still references the obsolete CONTINUOUS_ACCESS keyword for Post Auth Session policies. The most recent specification defines the correct policy type as POST_AUTH_SESSION, which causes a mismatch and prevents retrieval of Post Auth Session policies using typed records.

What is expected to happen?

The SDK should use the POST_AUTH_SESSION type following the updated Open API specification to allow successful retrieval of Post Auth Session policies.

What is the actual behavior?

The Okta Go SDK uses the obsolete CONTINUOUS_ACCESS policy type for Post Authentication Session policies.

Reproduction Steps?

  • Use the latest Okta Go SDK.
  • Attempt to retrieve Post Authentication Session policies using the SDK's generated policy models. Specifically PolicyAPI.ListPolicies method with "POST_AUTH_SESSION" type.
  • Observe that the ContinuousAccessPolicy property of the returned records is empty.

Additional Information?

No response

Golang Version

go version go1.23.2 darwin/arm64

SDK Version

v5

OS version

Darwin Ozans-MacBook-Pro.local 24.3.0 Darwin Kernel Version 24.3.0: Thu Jan 2 20:23:36 PST 2025; root:xnu-11215.81.4~3/RELEASE_ARM64_T8112 arm64

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingstale

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions