Shibboleth Idp does not persist URL hash fragments across a login redirect.

Rainer Hoerbe rainer at hoerbe.at
Tue Apr 12 10:05:50 EDT 2016


Shouldn’t the SP store the full URL including the fragment part in the relaystate cookie?

- Rainer
> Am 12.04.2016 um 14:07 schrieb Peter Schober <peter.schober at univie.ac.at>:
> 
> * Abdul Waheed <waheedtechblog at gmail.com> [2016-04-12 11:04]:
>> I am working on Web application which is developed in AngularJS and by
>> default Angular uses the URL hash fragment to maintain client-side. So most
>> of our URLs contains ‘#’ in it
> 
> URL fragments are private to the HTTP User Agent. Since they're not
> sent to the server there's nothing the Shib SP (running as part of the
> server) can do to preserve them.
> Cf. https://en.wikipedia.org/wiki/Fragment_identifier#Basics
> (In the URL above Wikipedia's servers will not recieve the "Basics"
> fragment identifier.)
> -peter
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list