Anyone securing an Angular application

[Starkey, Don [BSD] - CRI]

Hi everyone,

That does not really help me, I want the application to establish a valid session.  The problem is that the Shib login screen is never hit.

Please pardon my ignorance on this matter, 

Thank you,
Don Starkey
Lead Web Application Developer

Center for Research Informatics
The University of Chicago
5454 S. Shore Drive, 1D
Chicago, IL 60637
Phone:  773-834-4809
Email:  dstarkey at bsd.uchicago.edu

________________________________________
From: users [users-bounces at shibboleth.net] on behalf of Starkey, Don [BSD] - CRI [dstarkey at bsd.uchicago.edu]
Sent: Thursday, July 19, 2018 9:49 AM
To: users at shibboleth.net
Subject: Anyone securing an Angular application

Hello,

I am having trouble securing my Angular application.   The same shib setup works fine for .net apps and web form sites.  So that is not an issue.  However, when I try to use the same shib setup to secure the angular application it does not work.  In order to isolate the problem, I removed the catchall route.  This let me see that the shib is trying to connect but it just displays the shib error page.  Following error in Dev Toolbox.

GET https://shibboleth2.uchicago.edu/idp/profile/SAML2/Redirect/SSO?SAMLhttps://shibboleth2.uchicago.edu/idp/profile/SAML2/Redirect/SSO?<https://shibboleth2.uchicago.edu/idp/profile/SAML2/Redirect/SSO?SAML>SAML Request xxxxxxxx

500 server error, and Shib simply displays error page without giving option to sign in

Also:

Cross-Origin Read Blocking (CORB) blocked cross-origin response https://urldefense.proofpoint.com/v2/url?u=https-3A__shibboleth2.uchicago.eduhttps-3A__shibboleth2.uchicago.edu&d=DwICAg&c=Nd1gv_ZWYNIRyZYZmXb18oVfc3lTqv2smA_esABG70U&r=SyA2YCI7HlJq7K2uJNf8XuCvAFTPQKOAB76WrUUQM8M&m=YqvsSAnldXWcL7zf5o3X8P9x9fq2QGTmsxc_iWK-xII&s=F2_UOp9C3_AViCk-NpG3ZzSlduXxtWrt8ovISZ24htI&e=

So I believe that CORS is blocking access to the shib provider, but I do not know how to disable this to allow my application to access the shib web site.  Does anyone have an Angular application working and how did you set up the application to allow Shibboleth authentication.

Any help is greatly appreciated.

Thank you,


Don Starkey
Lead Web Application Developer

Center for Research Informatics
The University of Chicago
5454 S. Shore Drive, 1D
Chicago, IL 60637
Phone:  773-834-4809
Email:  dstarkey at bsd.uchicago.edu<mailto:jjohnso3 at bsd.uchicago.edu>
--
For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=Nd1gv_ZWYNIRyZYZmXb18oVfc3lTqv2smA_esABG70U&r=SyA2YCI7HlJq7K2uJNf8XuCvAFTPQKOAB76WrUUQM8M&m=YqvsSAnldXWcL7zf5o3X8P9x9fq2QGTmsxc_iWK-xII&s=2mzJevU5mV-SNTsbKYMZhb7_pTBBId9WU9Lecuov_9c&e=
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net