Questions about Shibboleth Attribute Access with modern Webservers

[V]

Hi all,

I am writing an application for a university project which will use
Shibboleth SP for SSO.

However, the codebase is in Rust (using axum as a webserver), and I
currently am rather puzzled about how one would access the attributes
provided in the server environment variables after the request has been
intercepted by an Apache Instance running Shibboleth SP.

The web seems to hold rather sparse information about what these variables
are and how to access them, especially in languages that aren't PHP or Ruby.

Thus, I wanted to ask:

1. Has anyone attempted to get Shibboleth working with a webserver written
in a Language like Rust or C++ while - as recommended - using Server
Variables ?
2. In case this is not feasible: What is the current verdict on using HTTP
headers instead ? I have read in the Atlassian documentation that by now,
this approach has been worked on to make it as secure as possible
(employing anti-spoofing techniques as well) but naturally there's always a
remaining risk.

King regards,
Vivienne
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20260814/8a97e707/attachment.htm>