dinislage/web2py
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

correct SAML authorization request binding

Browse Source 
AuthnRequest cannot use BINDING_HTTP_REDIRECT, according to the SAML v2 specifications.  See:
https://github.com/IdentityPython/pysaml2/issues/163
This commit is contained in:
Tim Nyborg authored and GitHub committed 2019-05-07 09:09:56 +01:00
1 parent ee3b63b792
commit 3f15d1ceb8
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
gluon/contrib/login_methods/saml2_auth.py
+1 -1
View File
@@ -118,7 +118,7 @@ def saml2_handler(session, request, config_filename = None, entityid = None):
elif request.env.request_method == 'POST': elif request.env.request_method == 'POST':
binding = BINDING_HTTP_POST binding = BINDING_HTTP_POST
if not request.vars.SAMLResponse: if not request.vars.SAMLResponse:
req_id, req = client.create_authn_request(destination, binding=binding) req_id, req = client.create_authn_request(destination, binding=BINDING_HTTP_POST)
relay_state = web2py_uuid().replace('-','') relay_state = web2py_uuid().replace('-','')
session.saml_outstanding_queries = {req_id: request.url} session.saml_outstanding_queries = {req_id: request.url}
session.saml_req_id = req_id session.saml_req_id = req_id