CAS and HTML local storage

[Mika Tiainen]

On 2016-05-26, Cantor, Scott wrote:
> It seems like it's trying to load data that the client is giving it and
> it's invalid or something. Is the browser fully cleared and re-initialized
> and still gives that error?

Yes, happens with completely empty profile on IE and Firefox.
 
>> Where does ClientSessionStorageService come from?
>> idp.session.StorageService is shibboleth.MemcachedStorageService
> 
> Then why are you enabling local storage? That doesn't make much sense.

We would like to use it for consent storage with SAML. Is it possible to
enable it only for SAML endpoints?
 
> You left them configured in the session-manager.xml file so as far as
> its concerned it still needs to try and load/save data with them.
> Normally that's harmless, if a little extra work, but if you turn on
> local storage, that's also going to add transits to the client and back
> on both ends, so that's a terrible choice if you're not using them.
> Still doesn't explain an error like that, but it's possible there's
> something off in the CAS flows.

Yes, session-manager.xml is untouched. I guess I could comment
<ref bean="shibboleth.ClientSessionStorageService" />
but
<ref bean="shibboleth.ClientPersistentStorageService" />
is needed for consent storage, right?

-- 
Mika Tiainen
Saimaa University of Applied Sciences
IT services