AW: Javascript ECP access and CORS issues

[Kevin Flückiger]

> Extremely uncommon. Nobody I'm aware of has attempted to implement ECP in JS.
> In any case, your issue here is with the web server / container environment, so that's pretty much why there's no 
> response.

I was thinking that maybe the shibboleth apache module was stripping off headers or something like that. But I take your response as an answer that this isn't the case.

> Normally people are doing things with OAuth that would make me want a shower, or the more common model historically is to
> require an overarching session via cookie with the service before anything 
> under the covers gets done. That breaks when things timeout of course.

So you mean establishing a session via OAuth and then access the shibboleth protected resource with the session cookie? Is such an interoperability possible? 
However, I would be glad if I could get it to work with shibboleth only.

Thanks for your help Scott!

Kevin

-----Ursprüngliche Nachricht-----
Von: users [mailto:users-bounces at shibboleth.net] Im Auftrag von Cantor, Scott
Gesendet: Mittwoch, 2. März 2016 18:16
An: Shib Users <users at shibboleth.net>
Betreff: RE: Javascript ECP access and CORS issues

> So no ideas about this? I'm really stuck on this..
> Isn't it quite common to do programmatical logins with shibboleth?

Extremely uncommon. Nobody I'm aware of has attempted to implement ECP in JS. In any case, your issue here is with the web server / container environment, so that's pretty much why there's no response.

> How would this be done otherwise?

Normally people are doing things with OAuth that would make me want a shower, or the more common model historically is to require an overarching session via cookie with the service before anything under the covers gets done. That breaks when things timeout of course.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net