Closed cs4p closed 1 year ago
It's possible I need to make IdP.prepare_request
customizable, so you could change how the Django request is handed off to OneLogin_Saml2_Auth
by overriding the port. But I'm curious about:
There is a SP_PREPARE_REQUEST
Django setting, and a IdP.prepare_request_method
field to override the request preparation per-IdP. One of these should allow you to do what you need - although I would probably still look into making Django's get_host
and get_port
return the right thing for you. There are a number of settings that affect how those derived.
Scenario: Django app is running in a Kubernetes cluster. Internally on the container, the app runs at http://app.domain.com:8000. But when accessed externally the app responds on https://app.domain.com/. The mapping is handled by the Kubernetes ingress server.
When trying to authenticate I get the error: "The response was received at http://app.domain.com:8000/sso/acs instead of https://app.domain.com/sso/acs.
In the IDP configuration, the BaseURL is set to https://app.domain.com/. I think I need a way to specify the acs URL separately from the base URL?