search

lawrencepit / ruby-saml-idp

SAML Identity Provider library in ruby
MIT License
137 stars 102 forks source link

Why POST the SAMLResponse to the SP and not redirect? #34

Open michaelfranzl opened 3 years ago

michaelfranzl commented 3 years ago

The provided HTML form auto-POSTs the SAMLResponse on page load (triggered by Javascript). I wonder why this was preferred over a redirect?

References:

https://github.com/lawrencepit/ruby-saml-idp/blob/master/app/controllers/saml_idp/idp_controller.rb#L26 https://github.com/lawrencepit/ruby-saml-idp/blob/master/app/views/saml_idp/idp/saml_post.html.erb

pdany1116 commented 2 months ago

Hi @michaelfranzl, did you find an answer? Do you know if a redirect instead of post works?