opensaml endpoint check

Cantor, Scott cantor.2 at osu.edu
Tue May 1 21:56:48 BST 2012


On 5/1/12 4:52 PM, "Paul Hethmon" <paul.hethmon at clareitysecurity.com>
wrote:

>Ok, following up on my own post here. This actually was not as much
>trouble as I thought. I just had my class extend HttpPostDecoder and then
>implemented "compareEndpointURIs" to return true. It would be nice to not
>have to do this, but that's not a problem
> of OpenSAML, that's just my environment.

If you're using servlets as the containing environment, you can write a
filter or an adapter class to override the getScheme() method. If it's not
servlets, I think you'd have to supply your own adapter to use the message
classes anyway.

Just an alternative. Obviously, this is a limitation in your container if
it can't be virtualized.

-- Scott



More information about the dev mailing list