opensaml endpoint check

Paul Hethmon paul.hethmon at clareitysecurity.com
Tue May 1 22:03:34 BST 2012



On 5/1/12 4:56 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 5/1/12 4:52 PM, "Paul Hethmon" <paul.hethmon at clareitysecurity.com>
>wrote:
>
>>Ok, following up on my own post here. This actually was not as much
>>trouble as I thought. I just had my class extend HttpPostDecoder and then
>>implemented "compareEndpointURIs" to return true. It would be nice to not
>>have to do this, but that's not a problem
>> of OpenSAML, that's just my environment.
>
>If you're using servlets as the containing environment, you can write a
>filter or an adapter class to override the getScheme() method. If it's not
>servlets, I think you'd have to supply your own adapter to use the message
>classes anyway.
>
>Just an alternative. Obviously, this is a limitation in your container if
>it can't be virtualized.
>

Yea, I wish it was that easy. It's based on Apache Sling and uses OSGi.
Servlets and filters would be a blessing.

Paul



More information about the dev mailing list