shibboleth.Conditions.Scripted and User-Agent http header ?
Jarno Huuskonen
jarno.huuskonen at uef.fi
Fri Jul 5 08:21:29 UTC 2024
Hi,
With IdP-5.1.2 this shibboleth.Conditions.Scripted:
<bean id="UEF.SameSiteCondition" parent="shibboleth.Conditions.Scripted"
factory-method="resourceScript"
p:returnOnError="true" p:hideExceptions="true"
c:_0="javascript" c:_1="%{idp.home}/conf/samesite.js" />
fails with:
ERROR [net.shibboleth.shared.logic.ScriptedPredicate:114] - Scripted
Predicate from file [/opt/shibboleth-idp/views/samesite.js]: Input of type
class org.apache.catalina.connector.RequestFacade was not of type class
org.opensaml.profile.context.ProfileRequestContext
It appears to work if I change the bean
parent="shibboleth.Conditions.Scripted"
to class="net.shibboleth.shared.logic.ScriptedPredicate"
Is this change expected ? (conditions.xml from idp-conf-impl-5.1.2.jar seems
to define:
<bean id="shibboleth.Conditions.Scripted"
class="net.shibboleth.profile.context.logic.ScriptedPredicate"
abstract="true" />
) (different class: net.shibboleth.profile.context.logic.ScriptedPredicate
vs. net.shibboleth.shared.logic.ScriptedPredicate)
(Original full IdP4.x example in this thread:
https://shibboleth.net/pipermail/users/2022-March/051910.html)
-Jarno
--
Jarno Huuskonen
More information about the users
mailing list