passing attributes from mod_shib via proxy to an application

Marcus Schopen lists at localguru.de
Thu May 16 12:40:22 EDT 2019


Am Donnerstag, den 16.05.2019, 18:19 +0200 schrieb Marcus Schopen:
> 
> Is this the right/secure way or is it done differently?

Oops, I just read the following pages:


https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess


https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSpoofChecking#NativeSPSpoofChecking-Apache

Is it safer to run the Flask application with mod_wsgi and access the
attributes of mod_shib as environment variables instead of sending them
via HTTP header via mod_proxy?

Ciao
Marcus




More information about the users mailing list