Adding attributes as request parameters along with environment variables.

[Brian Reindel]

We have a thick client written entirely in JavaScript and served up by
Apache (and protected by the Shibboleth module). Once a user has
authenticated, that thick client needs to make use of some of the
attributes passed back from the identity provider (most notable is an
oauth access token). However, there is no server side processing to
parse the attributes, so the thought was to grab them off the query
string. Initially I attempted to rewrite the URl in Apache to take the
environment variables and parse them into query strings before
returning to the application. It seems though that the environment
variables are not available until after the rewrite rules are
processed. I can log the attribute environment variable, so I know it
is being set. Is there another way I can do this? I have full control
on the identity provider with a custom WAR deployed, so any possible
options don't just need to involve the service provider.