<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
Thank you for the explanation and the hint to look at the Release Notes! Found them here:
<a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631499/ReleaseNotes#4.3.1-(March-30,-2023)" id="LPlnk255347" class="elementToProof">
https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631499/ReleaseNotes#4.3.1-(March-30,-2023)</a> and they referenced this more detailed guide:
<a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/3139993601/Moving+to+Suppliers+for+accessing+HttpServlet+Objects" id="LPlnk178071">
https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/3139993601/Moving+to+Suppliers+for+accessing+HttpServlet+Objects</a><br>
</div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
<br>
</div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
With this information I managed to repair my SSO AuthFunction - but I've got another problem that prevents my IDP 4.3.1 from working as hoped:</div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
<br>
</div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted2 ContentPasted3">
WARN [net.shibboleth.idp.ui.csrf.impl.CSRFTokenFlowExecutionListener:183] - CSRF token is required but was not found in the request; for view-state 'DisplayUsernamePasswordPage' and event 'proceed'.
<div class="ContentPasted2">WARN [org.opensaml.profile.action.impl.LogEvent:101] - A non-proceed event occurred while processing the request: InvalidCSRFToken</div>
<div class="ContentPasted2">ERROR [org.apache.velocity.loader:355] - ResourceManager: unable to find resource 'status.vm' in any resource loader.</div>
<br>
The webpage displays "CSRF-Token-Verifizierung fehlgeschlagen" - Can you give me any pointers how I could solve this problem?</div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted2 ContentPasted3">
<br>
</div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted2 ContentPasted3">
Thank you!</div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted2 ContentPasted3">
Kind regards,</div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted2 ContentPasted3">
Thomas Käfer</div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted2 ContentPasted3">
<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Von:</b> Cantor, Scott <cantor.2@osu.edu><br>
<b>Gesendet:</b> Dienstag, 4. April 2023 14:20<br>
<b>An:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Käfer Thomas <thomas.kaefer@fh-campuswien.ac.at><br>
<b>Betreff:</b> Re: IDP3/4 -> read (&write) custom session cookie for authentication</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">The type of that bean is different in 4.3.<br>
<br>
Look at the release notes for details on the conversioon to the supplier bean to access the servlet request, and in general avoid auto-wiring and anotations. They are not suited to production use cases, those are toys that are focused on Spring as a rapid deployment
tool. We use them, but we also understand their (huge) limitations.<br>
<br>
Our contract is through class types and bean names, but never the combination of the two. That will not allow for safe upgrades.<br>
<br>
-- Scott<br>
<br>
<br>
</div>
</span></font></div>
<div style="font-size:10pt; font-family: 'Verdana',sans-serif;">
<p>Informationen zum Datenschutz: www.fh-campuswien.ac.at/datenschutzerklaerung </p>
</div>
</body>
</html>