When reauth is needed it does not carry POST/GET variables

Dan shibboleth at mailscan.dk
Fri Feb 21 21:17:40 UTC 2025


> Once you've fixed this for GET requests with query parameters you can
> move on to tackle lost HTTP POST requests to your server, see
> https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334342/Sessions
> and start looking for "post".

I have digged some more into this, and it seems that my $_GET actually was passed nicely. I am not sure here for $_POST, but I have now added "postData" to my <Sessions> in "shibboleth2.xml":

<Sessions
  lifetime="1209600"
  timeout="3600"
  relayState="ss:mem"
  postData="ss:mem"
  checkAddress="false"
  handlerSSL="true"
  cookieProps="https"
  redirectLimit="exact">

Now I do see the $_POST data, but only when this is a "normal" <form>. When my form is set to:

enctype='multipart/form-data'

.. then it will NOT show the $_POST variables.

This here will NOT show any $_POST variables:

<?PHP
$var = $_POST["var"] ?? "";
echo "<form action'./' enctype='multipart/form-data' method='POST'>";
echo "<input type='text' name='var' value='$var' />";
echo "<input type='submit' />";
echo "</form>";
?>

This WILL show the $_POST variables (removed the "enctype"):

<?PHP
$var = $_POST["var"] ?? "";
echo "<form action'./' method='POST'>";
echo "<input type='text' name='var' value='$var' />";
echo "<input type='submit' />";
echo "</form>";
?>

I of course do need the "enctype", as I need the file upload.

Any ideas for this?

// Dan


More information about the users mailing list