Skip to content

Remove SAML request from URL in wayf#1987

Draft
johanib wants to merge 2 commits intomainfrom
feature/1973-hide-url-in-bar
Draft

Remove SAML request from URL in wayf#1987
johanib wants to merge 2 commits intomainfrom
feature/1973-hide-url-in-bar

Conversation

@johanib
Copy link
Copy Markdown
Contributor

@johanib johanib commented Apr 22, 2026

Prior to this change, users would bookmark the wayf. This caused expired/old saml requests from being handled by EB. EB does not have issues with that, but the SP might.

This change prevents users from bookmarking SAML requests.

Resolves #1973

@johanib johanib linked an issue Apr 22, 2026 that may be closed by this pull request
@johanib johanib requested a review from kayjoosten April 22, 2026 14:01
Prior to this change, users would bookmark the wayf. This caused expired/old saml requests from being handled by EB. EB does not have issues with that, but the SP might.

This change prevents users from bookmarking SAML requests.

Resolves #1703
@johanib johanib force-pushed the feature/1973-hide-url-in-bar branch from 51638a6 to bb9e0d0 Compare April 22, 2026 14:09
@johanib johanib marked this pull request as draft April 23, 2026 06:31
Prior to this change, when the user would click the wrong IdP in the wayf, then used the back button, an error page would be shown, because the saml request was gone from the url.

This change stores the saml request in the session when visiting the wayf. This way, when the wayf is visited without a request, the last used request will be used.

Fixes #1973
@johanib
Copy link
Copy Markdown
Contributor Author

johanib commented Apr 23, 2026

Blocked by: #1973 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Hide SAMLRequest in url bar

1 participant