Persistent Cookies with Shibboleth IDP?

Byte Flinger byteflinger at gmail.com
Mon Aug 5 17:34:39 EDT 2013


Could you elaborate on what you mean by a java filter Scott? Do you mean a
servlet filter in a custom login handler which sets/changes the idp_session
cookie set by the core code?
On Aug 5, 2013 11:05 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

> On 8/5/13 4:54 PM, "Byte Flinger" <byteflinger at gmail.com> wrote:
>
> >I have made some tests myself using latest chrome and, at least with its
> >default cookie settings, it removed the cookie after closing it.
>
> That would be news to me, everybody has indicated Chrome doesn't do this
> anymore.
>
> >I know that due to the open nature of Shibboleth I could literally just
> >change the code but I was thinking more along the lines of something
> >simpler like extending the username/password login handler. I thought the
> >idp_session cookie code was at Shibboleth's
> > core but maybe I need to look at the code again.
>
> It is in the core. The only viable way would probably a Java filter.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130805/35231faa/attachment.html 


More information about the users mailing list