search

IdentityServer / IdentityServer2

[deprecated] Thinktecture IdentityServer is a light-weight security token service built with .NET 4.5, MVC 4, Web API and WCF.
Other
409 stars 291 forks source link

How to retrieve Url referrer on long page. #751

Closed hdcrewsr closed 10 years ago

hdcrewsr commented 10 years ago

Is it possible to derive the reffer url from the thinktecture sign in page? For example I launch the page https://somedomain.com/ Since I am not authorized I am redirected to https://somedomain.com/idsrv . From here I would like to be able to retrieve the url somedomain.com. When I look in Request.Querystring or Request.Params at the "wctx" param I get a value of ""rm=0&id=passive&ru=%2f" Looking to Request.Referrer this value is also null. Can you provide any suggestion on how to retrieve this url? I am trying to do this within the SignIn.cshtml view to generate a link back to the orignally requested site to a section that does not require authorization (https://somedomain.com/nonsecuredarea)

brockallen commented 10 years ago

Referrer is unreliable in HTTP. Also the wctx param is meant to be opaque to the STS. In short, technically you shouldn't be looking into either.

brockallen commented 10 years ago

Oh sorry -- and what you should be looking at in the STS is the realm being requested. This is available in the WS-Fed controller and could be passed to the login page (but you'd have to make this change).