Populating session context fails lookups
Misagh Moayyed
mmoayyed at unicon.net
Mon Sep 14 12:29:54 EDT 2015
And as much as I can tell, that is all happening correctly. I do see the
session context populated on the first try and I am able to access the
application just fine. What is puzzling it, subsequent requests to the IdP
end up invoking an action that attempts to call PopulateSessionContext.
This attempts to locate the session from cookies via the SessionResolver,
finds the cookie value, calls the storage service to look up the cookie by
that value. The call stack eventually ends up inside
"ServletRequestScopedStorageService" where it attempts to collect all
cookies and find one that is "shib_idp_req_ss". This is where it fails,
because the only two cookies I can see are the idp session cookie and
jesssion cookie.
So, where does that cookie come from? And why might cause it to be absent
on subsequent tries?
> -----Original Message-----
> From: dev [mailto:dev-bounces at shibboleth.net] On Behalf Of Cantor, Scott
> Sent: Monday, September 14, 2015 9:02 AM
> To: Shib Dev <dev at shibboleth.net>
> Subject: Re: Populating session context fails lookups
>
> On 9/14/15, 12:01 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
>
> >On 9/14/15, 11:55 AM, "dev on behalf of Misagh Moayyed" <dev-
> bounces at shibboleth.net on behalf of mmoayyed at unicon.net> wrote:
> >
> >>I am very likely missing the step that would tell me how the storage
> >>is service contacted and where, but I presume there is action
somewhere
> that actually creates that storage record so that future calls can
> populate and resolve the session context.
> >>
> >>
> >>Does that sounds correct? If so, where is the action/component that
> actually creates a storage record based on the cookie value and how is
> called in the flow?
> >
> >The master authentication subflow creates/updates the IdPSession with
the
> AuthenticationResult produced at the very end:
>
> (Which of course by implications means you shouldn't need to do
anything,
> your flow should be calling the authn subflow and it will create the
> session for you.)
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to dev-
> unsubscribe at shibboleth.net
More information about the dev
mailing list