HTTPostEncoder not deflating AuthN Request

Axel Rose axel.roeslein at googlemail.com
Sun Mar 26 03:31:59 EDT 2017


Of course you are absolutely right. Just after sending the e-mail I checked
the standard documents again and recognized my error. Sorry.

I was mislead by the form https://www.samltool.com/decode.php

2017-03-24 19:03 GMT+01:00 Brent Putman <putmanb at georgetown.edu>:

>
>
> On 3/24/17 3:13 AM, Axel Rose wrote:
>
>
> Using OpenSAML3 and HTTPPostEncoder I get a seemingly corrupt (*)
> AuthNRequest.
> The request ist fine though if I use HTTPRedirectDeflateEncoder.
>
>
> Well, if per the subject line, you're expecting the POST encoder to
> deflate the SAML message: That's incorrect.  In the SAML 2 POST binding,
> there is no deflation like in the Redirect-DEFLATE binding.  The serialized
> XML is simply base64-encoded and placed into the form.  SAML Bindings,
> section 3.5.4:
>
> Messages are encoded for use with this binding by encoding the XML into an
> HTML form control and are
> transmitted using the HTTP POST method. A SAML protocol message is
> form-encoded by applying the
> base-64 encoding rules to the XML representation of the message and
> placing the result in a hidden form
> control within a form as defined by [HTML401] Section 17. ......
>
>
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170326/b18f6431/attachment.html>


More information about the dev mailing list