Simple Java client for accessing Shibboleth-protected services?

Richard Eckart de Castilho richard.eckart at gmail.com
Thu Jul 25 19:15:08 EDT 2013


>>> I have implemented a HttpClient variant based on Apache Commons
>>> httpcore 4.2.2 and opensaml 2.5.3 which tries to detect if the remote
>>> site is protected using Shibboleth and if so, tries to log in to a
>>> predefined IdP using ECP and a username and password.
>> 
>> For anybody interested and of course open to comments:
>> 
>> https://github.com/reckart/shib-http-client

I'd like to mention that I have updated the client. POST requests and other
non-redirectable requests had been a problem before. Now, when such a request
is done, the client tries a HEAD request first to determine if a login is
necessary. If necessary, it performs the login, then proceeds with the original
request.

I still only tested this against a single Shibboleth IdP, Version 2.4.0, but
it appears to be working nicely :)

Thanks again for your help!

-- Richard


More information about the dev mailing list