Comments (9)
Luke Taylor said:
Pleas don't open extension issues in the main security project
from spring-security-saml.
Mandus Elfving said:
The supplied patch adds support for the SOAP binding (as well as the artifact binding, it still needs an artifact resolution service for outgoing requests and a decoder for incoming requests though) and customizable bindings in the SAMLProcessorImpl class.
from spring-security-saml.
Mandus Elfving said:
Patch to add support for the SOAP binding and customizable bindings in the SAMLProcessorImpl class.
from spring-security-saml.
Mandus Elfving said:
Updated patch with some small fixes.
from spring-security-saml.
Vladimir Schäfer said:
The support for SOAP binding is implemented in the codebase, but the main use-case where this is relevant = Single Logout, requires access to the current user's session which is unavailable (as SOAP calls typically do not include session cookie). For this reason SOAP binding is not included in the generated metadata. I'm leaving the issue opened in case we add a different mechanism which would allow closing of user's session without direct access to it.
from spring-security-saml.
Jeremy Simon said:
Hi, I implemented a mechanism for closing out a user's session without direct access to it. I made a registry for Session Indexes and the Authentication objects that is managed as part of login and logout work. So at least my build does SLO pretty well. :)
I'd love to contribute it back -- what's the best way? Make a fork of the project? I'm pretty new in Spring stuff, so I'm sure you'd be able to make what I did much better very quickly.
I also use WSO2 Identity Server and had patched some short-comings it had. Although, they've fixed a ton of stuff recently and 5.1 and 5.2 will be very agreeable. (SLO with SOAP is coming https://wso2.org/jira/browse/IDENTITY-3578). I'm just mentioning this here because some people seem to encounter much grief with that IDP once they're moving along... there's hope! ;)
from spring-security-saml.
Vladimir Schäfer said:
Hi, this would be definitely a welcome contribution. Does your implementation take into account clustered deployments, which is the key pain-point of this feature? The best way to send code is through pull requests in GitHub.
from spring-security-saml.
Jeremy Simon said:
I'll make a fork and pull request. It does not take into account clustered deployments right now. It's a thread-safe map under the hood, but I'd like to take it further, just have not. (I actually kept running into a lot of ridiculous things with WSO2 Identity Server that I've been investigating and patching.)
The main pain-point probably was just learning someone else's code and paradigm enough to do anything useful. It took a while to find what I could or could not store, and the wheres and whens. :)
Hopefully people will be kind. I'm sure this could be made significantly better and thorough! I'll try to get a pull request done in the coming weeks.
from spring-security-saml.
Hello ,
Is there any workaround or documentation to make backchannel synchronous soap binding SLO work in spring saml?
I have a ticket at WSO2 and apparently they are not planning on enabling asynchronous frontchannel SLO very soon (5.5.0 probably). Unbelievable why they put this on low priority , i have been waiting for it since WSO2 IS 5.0.0.
Any help would be much appreciated.
kind regards.
from spring-security-saml.
Related Issues (20)
- Apache HttpClient3.1 has a security vulnerability while using SAML2 authentication in Grails4 HOT 1
- Depenedencies can not be loaded since repo.spring.io got restricted HOT 1
- java 11 compatability HOT 1
- wrongly setting empty to a null Set<String> HOT 1
- Upgrade to secure version of Apache Velocity HOT 3
- VelocityFactory sets invalid properties
- Update Venocity for CVE-2021-29425 Mitigation
- how to handle URL encoding in SAML response HOT 1
- spring-security-saml2 opensaml v.2 dependency conflict with opensaml v.3 HOT 1
- SAMLDefaultLogger logs warning errors on INFO level HOT 1
- Dependency cycle with SAMLEntryPoint HOT 2
- org.springframework.security.saml2.provider.service.authentication.Saml2RedirectAuthenticationRequest is not serializable HOT 1
- login sometimes is only possible at the second click HOT 1
- Compatibility with Spring 6 HOT 5
- CSP issue velocityTemplateId on HTTPPostBinding
- Update esapi version for vulernability CVE-2022-23437 to 2.2.3.0 or greater
- EmptyStorageFactory Questions for Replay Prevention HOT 1
- Update esapi version for CVE-2022-23457 HOT 3
- MetadataManager returns random idp from the list of registered
- Why is the Subject of the Assertion required?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from spring-security-saml.