When reauth is needed it does not carry POST/GET variables
Dan
shibboleth at mailscan.dk
Fri Feb 21 21:17:40 UTC 2025
> Once you've fixed this for GET requests with query parameters you can
> move on to tackle lost HTTP POST requests to your server, see
> https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334342/Sessions
> and start looking for "post".
I have digged some more into this, and it seems that my $_GET actually was passed nicely. I am not sure here for $_POST, but I have now added "postData" to my <Sessions> in "shibboleth2.xml":
<Sessions
lifetime="1209600"
timeout="3600"
relayState="ss:mem"
postData="ss:mem"
checkAddress="false"
handlerSSL="true"
cookieProps="https"
redirectLimit="exact">
Now I do see the $_POST data, but only when this is a "normal" <form>. When my form is set to:
enctype='multipart/form-data'
.. then it will NOT show the $_POST variables.
This here will NOT show any $_POST variables:
<?PHP
$var = $_POST["var"] ?? "";
echo "<form action'./' enctype='multipart/form-data' method='POST'>";
echo "<input type='text' name='var' value='$var' />";
echo "<input type='submit' />";
echo "</form>";
?>
This WILL show the $_POST variables (removed the "enctype"):
<?PHP
$var = $_POST["var"] ?? "";
echo "<form action'./' method='POST'>";
echo "<input type='text' name='var' value='$var' />";
echo "<input type='submit' />";
echo "</form>";
?>
I of course do need the "enctype", as I need the file upload.
Any ideas for this?
// Dan
More information about the users
mailing list