Bug #4378
request processing is backward, we should know the issuer before processing the request
Start date:
28 February 2014
Due date:
% Done:
0%
Estimated time:
Patch proposed:
Planning:
Description
For IdP with lot of providers or doing auto-provisionning of metadata it's necessary to know the issuer of a request before calling the processRequestMsg() method.
A class method LassoProfile.get_saml2_msg_issuer(cls, msg, http_method) could be a solution.
Associated revisions
FAQ: add section about getting the issuer before parsing the received message (#4378)
History
Updated by Benjamin Dauvergne about 8 years ago
- Status changed from Nouveau to Fermé
- Target version changed from future to 2.5.0
profile: add two new class methods, lasso_profile_get_issuer and lasso_profile_get_in_response_to (#4378)
The goal of those two methods is to allow IdP and SP to load metadata
dynamically without processing completely the incoming. Currently it's
impossible as message parsing and signature checking is done in the same
function.