Url encode http header values in Shibboleth SP

[Mark Juszczec]

I'm not sure of this is the same thing, but search the archives for posts
where I'm the author.

I ran into this using Apache Tomcat.  Tomcat's code automatically converts
the headers to ISO-8859-1 and there's no way to turn that off.

The solution is to read the String, convert the bytes to ISO-8859-1 and the
create a new String from those bytes but specify UTF-8

In the larger web development world that knows nothing about Shibboleth,
this is discouraged as a hack.

Except with Shibboleth it's not a hack, it's the only thing you can do
(unless you can get the Tomcat guys to modify their code)

On Nov 17, 2016 11:44 AM, "Martin Mortensen" <martin.mortensen at adm.ku.dk>
wrote:

> I have setup Shibboleth SP on linux with Apache 2.4 and switched on http
> headers for an application that can get the user id, username and
> attributes via http headers. The application is Graylog 2.1.2 with add-on
> graylog plugin auth sso.
>
> It works well - but! - application doesnt understand utf-8 header values -
> as its a breach of the HTTP/1.1 RFC and is not well supported in browsers.
> They could understand the values if they were url-encoded - but I cant
> find anything for encoding the attributes in any way - only decoding.
> I cant find a way for Apache to url-encode the header values either - I
> guess its never come up, since http headers only really support us-ascii -
> and the RFC states that you should use mime encoding (RFC2047 encoding) if
> you wish to use data outside us-ascii charset.
>
> Is it possible to url-encode the http headers?
>
> --
>
> Martin R Mortensen
> Linux Specialist
>
> Københavns Universitet
> Koncern-it
> Nørregade 10, postboks 2177
> 1017 København K
>
> MOB 20 57 17 67
> TEL 35 32 29 63
>
> martin.mortensen at adm.ku.dk
> http://www.it.ku.dk/
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161118/6af3fcfc/attachment.html>