Embedded Discovery Service and SP history cookie
Rod Widdowson
rdw at steadingsoftware.com
Mon Oct 24 09:15:13 BST 2011
I just checked, the EDS sets '+' and looks for only that. I remember having issues in here when I developed this.
AFAICS at this distance, this is because java.net.URLDecoder.URLDecode converts '+' into ' ' and vice versa,
But the javascript function decodeURIComponent doesn't (and, to my chargrin I tested CDS/EDS cookie interop
rather more that I did SP/EDS)
I have entered https://issues.shibboleth.net/jira/browse/EDS-30 to handle this case.
> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Takeshi
> NISHIMURA
> Sent: 22 October 2011 20:40
> To: Shib Users
> Subject: Re: Embedded Discovery Service and SP history cookie
>
> Thanks Scott! I'll dive into the EDS code.
>
> On 2011/10/23, at 4:12, Cantor, Scott wrote:
>
> > On 10/22/11 2:44 PM, "Takeshi NISHIMURA" <takeshi at nii.ac.jp> wrote:
> >>
> >> I'm afraid SP and EDS are not compatible with each other if _saml_idp
> >> contains multiple entityIDs. There are two points of view:
> >> 1) Which one is the most recent
> >> 2) What string can be used as a delimiter
> >
> >> SP: the last is most recent, concatenated by '%20'
> >> EDS: the first is most recent, concatenated by '+'
> >>
> >> I don't know which semantics is right, but it is useful for me if both
> >> softwares use the same semantics.
> >
> > The last is the most recent. The encoding shouldn't matter, it's URL
> > encoded, and a + is generally the same as %20 unless there's a bug in the
> > decoder.
> >
> > -- Scott
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list