Haufe-Lexware / wicked.haufe.io

An API Management system based on Mashape Kong
http://wicked.haufe.io
Other
121 stars 37 forks source link

SAML: allowing idpOptions sso_urls to be parameterized #344

Open fleque opened 1 year ago

fleque commented 1 year ago

With this PR additional parameters that are passes to the authorization request, start with x_ and match a 'id-string' pattern are added to the authRequest structure that is kept in the session in a new property options. Additionally, if options have been added to the request the sso_login_url and sso_logout_url are mustache-processed with the authRequest as parameter.

This allows for idpOptions like "sso_login_url": "https://myidp.org:/auth/SSOPOST/metaAlias/idp-{{{options.auth_realm}}}" given that the authorization request as a parameter x_auth_realm=some-valid-value