Skip to content
Snippets Groups Projects
Unverified Commit 792a51c9 authored by David Taylor's avatar David Taylor Committed by GitHub
Browse files

FIX: Do not compress SAML request for POST binding (#55)

The SAML spec requires compression for the standard Redirect binding. However, it is not used in the POST binding. This regressed during the refactoring of 95ccea3f
parent dbca5ca9
No related branches found
No related tags found
No related merge requests found
......@@ -6,6 +6,7 @@ class ::DiscourseSaml::SamlOmniauthStrategy < OmniAuth::Strategies::SAML
def request_phase
if options[:request_method] == "POST"
with_settings do |settings|
settings.compress_request = false # Compression used by default for Redirect binding, not POST
authn_request = OneLogin::RubySaml::Authrequest.new
params = authn_request.create_params(settings, additional_params_for_authn_request)
destination = settings.idp_sso_service_url
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment