Is an SP initiated SSO SAML request is sent to the light_saml_idp.login route, the POST data is lost after Drupal redirects you through GET, resulting in a 403.

We should save $_POST['SAMLRequest'] before redirecting to /user/login to be able to use that later in the light_saml_idp.login route.

CommentFileSizeAuthor
#4 3085174-1.patch3.61 KBJohanKleene
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

MrHaroldA created an issue. See original summary.

  • MrHaroldA committed b0e732e on 8.x-1.x 
    Issue #3085174: Keep POST data after login
MrHaroldA’s picture

MrHaroldA CreditAttribution: MrHaroldA at iO commented
Status: Active » Needs review
JohanKleene’s picture

JohanKleene CreditAttribution: JohanKleene commented
Category: Feature request » Bug report
FileSize
3085174-1.patch3.61 KB

On login currently only the SAMLRequest parameter is saved in session. This patch also saves the RelayState temporarily in a session parameter. Without it the parameter is lost when relaying back to the SP.

MrHaroldA’s picture

MrHaroldA CreditAttribution: MrHaroldA at iO commented
Status: Needs review » Fixed

Tnx, Johan!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.