-
Notifications
You must be signed in to change notification settings - Fork 6k
Make SAML authentication request uri configurable #11316
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks, @houssemba! I've left some feedback inline.
public Saml2LoginConfigurer<B> authenticationRequestUri(String authenticationRequestUri) { | ||
Assert.state(authenticationRequestUri.contains("{registrationId}"), | ||
"authenticationRequestUri must contain {registrationId} path variable"); | ||
this.authenticationRequestUri = authenticationRequestUri; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please add a check here for OpenSAML 3 usage and break. We shouldn't add this support to OpenSAML 3 since Spring Security no longer supports it.
...g/springframework/security/config/annotation/web/configurers/saml2/Saml2LoginConfigurer.java
Outdated
Show resolved
Hide resolved
...curity/saml2/provider/service/web/authentication/OpenSaml3AuthenticationRequestResolver.java
Outdated
Show resolved
Hide resolved
...curity/saml2/provider/service/web/authentication/OpenSaml4AuthenticationRequestResolver.java
Show resolved
Hide resolved
...g/springframework/security/config/annotation/web/configurers/saml2/Saml2LoginConfigurer.java
Show resolved
Hide resolved
...curity/saml2/provider/service/web/authentication/OpenSaml4AuthenticationRequestResolver.java
Show resolved
Hide resolved
...k/security/saml2/provider/service/web/authentication/Saml2AuthenticationRequestResolver.java
Outdated
Show resolved
Hide resolved
Thanks @jzheaux for your review. I have taken your feedback into account. Don't hesitate if I forget something. |
Closes gh-10840