Shibboleth IDP3 & IDP4 - CORS Handling

[Christopher Bongaarts]

On 8/31/2020 12:58 PM, prasanna cg via users wrote:
> *_Work around for Current state:_*
>
> 1) The above article describes the workaround to be performed by 
> adding the CORS filter from Jetty container into the IDP’s web.xml. 
> For my IDP v3 _deployed on Tomcat 8_, should I be using the equivalent 
> Tomcat’s CORS filter (from link below)  in the IDP’s Web.XML ?
> https://tomcat.apache.org/tomcat-8.0-doc/config/filter.html#CORS_Filter_and_HttpServletRequest_attributes
>
I expect that should work similarly to the Jetty filter.  If it works, 
please update the wiki page as a hint for future Tomcat users.

> *_Workaround for my future state:_*
>
> 2) I do not see a similar knowledge article for IDPv4 yet. So can you 
> confirm if the same workaround is applicable for IDPv4 on Tomcat v9 
> too ? Or is there anything different ?

While I have not tried it on v4, I don't think the differences should 
affect whether the CORS changes work.  So try it and see...

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200901/4e7e7cc7/attachment.htm>