[JIRA] Created: (SSPCPP-518) Incorrect requireLogoutWith redirection if the original URL has query string

Takeshi Nishimura (JIRA) noreply at shibboleth.net
Fri Oct 26 20:24:07 EDT 2012


Incorrect requireLogoutWith redirection if the original URL has query string
----------------------------------------------------------------------------

                 Key: SSPCPP-518
                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-518
             Project: Shibboleth SP - C++
          Issue Type: Bug
    Affects Versions: 2.5.0
            Reporter: Takeshi Nishimura
            Assignee: Scott Cantor
         Attachments: shibsp-2.5.0-addamp.patch

If you have the following setting,
{code}
<Location /secure/logout>
  require shibboleth
  ShibRequestSetting requireSession false
  ShibRequestSetting requireLogoutWith "/Shibboleth.sso/Logout"
</Location>
{code}
the access to
bq. /secure/logout?param=aaa
incorrectly redirect to the following URL after the Shib logout process.
bq. /secure/logout?param=aaashiblogoutdone=1
'&' should be added.

With no query string, all things work as expected.

I attached a patch for this problem.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the commits mailing list