HTTPostEncoder not deflating AuthN Request

Brent Putman putmanb at georgetown.edu
Fri Mar 24 14:03:49 EDT 2017



On 3/24/17 3:13 AM, Axel Rose wrote:
>
> Using OpenSAML3 and HTTPPostEncoder I get a seemingly corrupt (*)
> AuthNRequest.
> The request ist fine though if I use HTTPRedirectDeflateEncoder.
>

Well, if per the subject line, you're expecting the POST encoder to
deflate the SAML message: That's incorrect.  In the SAML 2 POST
binding, there is no deflation like in the Redirect-DEFLATE binding. 
The serialized XML is simply base64-encoded and placed into the form. 
SAML Bindings, section 3.5.4:

> Messages are encoded for use with this binding by encoding the XML
> into an HTML form control and are
> transmitted using the HTTP POST method. A SAML protocol message is
> form-encoded by applying the
> base-64 encoding rules to the XML representation of the message and
> placing the result in a hidden form
> control within a form as defined by [HTML401] Section 17. ......

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170324/923686f0/attachment.html>


More information about the dev mailing list