preserve query string during session Initiator
Jehan Procaccia
Jehan.Procaccia at it-sudparis.eu
Thu Mar 12 05:55:10 EDT 2015
Le 11/03/2015 23:24, Cantor, Scott a écrit :
>> after going through the shibboleth login process, I loose the browsing
>> context query string in the final target
>> exemple in a web biblio application, in the process of placing a hold on a book
>> selected while not yet connected:
> Using requireSession preserves the query string, that I'm fairly certain of. So I would imagine you have something else in the mix that's at fault here that's doing a manual redirect to /Login and dropping it. Realize that a standard request intercept in the SP never redirects to /Login. if that happens, you're doing it (in the broadest sense of "you"), not the SP.
Yes , I don't force requireSession (it is set to 0) , I want my users to
browse the site freely without beeing connected:
<LocationMatch /cgi-bin/koha/.*>
AuthType shibboleth
ShibRequestSetting *requireSession 0*
require shibboleth
</LocationMatch>
I want them to connect only when necessary (placing a hold on a book in
this case) , so I use "lazy session" as I understand it .
when they click on .../cgi-bin/koha/opac-reserve.pl?biblionumber=74745
it matchs the above LocationMatch /cgi-bin/koha/.* and the "require
shibboleth" through shibd starts <SessionInitiator type="Chaining"
Location="/Login" id="Login" >
as I understand the flow .
Now I am presented with the intermediary page :
<p>If you have a shibboleth account,
please<a href="https://site.domain.fr/Shibboleth.sso/Login?target=https://server.domain.fr/cgi-bin/koha/opac-reserve.pl <view-source:https://mediatheques.mines-telecom.fr/Shibboleth.sso/Login?target=https://mediatheques.mines-telecom.fr/cgi-bin/koha/opac-reserve.pl>">click here to login</a>.</p>
<h4>Local Login</h4>
<p>If you do not have a shibboleth account, but a local account, you can still log in :</p>
where the hardcoded link indeed removed the *?biblionumber=74745* .
It did took the referer
target=https://server.domain.fr/cgi-bin/koha/opac-reserve.pl
<view-source:https://mediatheques.mines-telecom.fr/Shibboleth.sso/Login?target=https://mediatheques.mines-telecom.fr/cgi-bin/koha/opac-reserve.pl>
but not the following query string,
is there a way to preserve it ? is it available in a http environnement
variable ? elsewhere ?
thanks for you help .
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150312/dc1dba80/attachment-0001.html
More information about the users
mailing list