correct SAML authorization request binding

AuthnRequest cannot use BINDING_HTTP_REDIRECT, according to the SAML v2 specifications. See: https://github.com/IdentityPython/pysaml2/issues/163
2019-05-07 09:09:56 +01:00
parent ee3b63b792
commit 3f15d1ceb8
1 changed files with 1 additions and 1 deletions
@@ -118,7 +118,7 @@ def saml2_handler(session, request, config_filename = None, entityid = None):
    elif request.env.request_method == 'POST':
        binding = BINDING_HTTP_POST
    if not request.vars.SAMLResponse:
-        req_id, req = client.create_authn_request(destination, binding=binding)
+        req_id, req = client.create_authn_request(destination, binding=BINDING_HTTP_POST)
        relay_state = web2py_uuid().replace('-','')
        session.saml_outstanding_queries = {req_id: request.url}    
        session.saml_req_id = req_id