Apache Shib SP and target URL rewrite

[Jan Vilhuber]

Assuming I'm looking at the right thing, I don't see the attributes in the header (I have 'ShibUseHeaders On' set). I'm looking with chrome's 'inspect' network tab:

--------
GET /myapp/interstitial?return=https%3A%2F%2Fdevlocal.absolute.com%2FShibboleth.sso%2FSAML2%2FPOST%3Fhook%3D1%26target%3Dss%253Amem%253A0820e9dba3db9f05d768e40700f231b9748db360b1a4b32c1b436c6ab8f7ea09&target=https%3A%2F%2Fdevlocal.absolute.com%2Fmyapp%2Ffoo.htm HTTP/1.1
Host: devlocal.absolute.com
Connection: keep-alive
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
DNT: 1
Referer: http://localhost:8080/SingleSignOnService
Accept-Encoding: gzip, deflate, sdch, br
Accept-Language: en-US,en;q=0.8
Cookie: _shibsession_64656661756c7468747470733a2f2f617574682e6162736f6c7574652e6f72672f73702f646576312d73686962626f6c657468=_39fa7c768e69bba49c3e5131ef2f0881
--------

The assertion that was processed has plenty of attributes, so I was really hoping I'd see them here. The endpoint I'm redirecting to doesn't actually exist (yet), and I AM aware of the downsides of using the HTTP header for attributes.

    <Location /myapp>
        AuthType shibboleth
        ShibRequestSetting requireSession 1
        ShibUseHeaders On
        require valid-user
    </Location>

Thoughts?
Jan



> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Jan Vilhuber
> Sent: Wednesday, March 8, 2017 4:20 PM
> To: Shib Users <users at shibboleth.net>
> Subject: RE: Apache Shib SP and target URL rewrite
> 
> Yea I figured it would be, but I'm not far enough along to be able to do that. In a
> day  or two..
> 
> Thanks for the help!
> Jan
> 
> 
> > -----Original Message-----
> > From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor,
> > Scott
> > Sent: Wednesday, March 8, 2017 8:23 AM
> > To: Shib Users <users at shibboleth.net>
> > Subject: Re: Apache Shib SP and target URL rewrite
> >
> > On 3/7/17, 7:59 PM, "users on behalf of Jan Vilhuber" <users-
> > bounces at shibboleth.net on behalf of JVilhuber at absolute.com> wrote:
> >
> > > Excellent. I assume the usual environment variables will contain
> > > information extracted from the assertion (the blurb on the wiki
> > > mentions
> > checking for required attributes)?
> >
> > That's a reasonable question and the answer is "I think so". I would
> > have to look at the code and it would be simpler if you just tried it.
> >
> > -- Scott
> >
> >
> > --
> > To unsubscribe from this list send an email to
> > users-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net