search

HewlettPackard / jupyterhub-samlauthenticator

jupyterhub-samlauthenticator
MIT License
36 stars 25 forks source link

Need to pass an _xsrf parameter in POST requests for Jupyterhub 4.x #72

Open cmbits opened 12 months ago

cmbits commented 12 months ago

When using jupyterhub-samlauthenticator with Jupyterhub 4.x I'm getting the following login error:

403 : Forbidden '_xsrf' argument missing from POST

There is a similar issue reported by a someone using LTIAuthenticator as the authentication module. https://github.com/jupyterhub/ltiauthenticator/issues/157

When monitoring the SAML interaction I do see the XSRF token getting send from my IdP: Set-Cookie: XSRF-TOKEN=c162cb78480d8ef; Path=/; Secure X-XSRF-TOKEN: c162cb78480d8ef

Looks like this issues started after this Jupyterhub code change; https://github.com/jupyterhub/jupyterhub/pull/4032

Would be possible to add XSRF token support?

Thanks, Chris