Connecting to DigiD via gateway fails - HTTP-Post binding support

open-formulieren / open-forms

Smart and dynamic forms

https://open-forms.readthedocs.io

Other

34 stars 25 forks source link

Connecting to DigiD via gateway fails - HTTP-Post binding support #860

Open joeribekker opened 2 years ago

joeribekker commented 2 years ago

Logging doesn't show anything other then the error message that is passed to the SDK as URL query pararameter.

SilviaAmAm commented 2 years ago

@joeribekker From the API gateway metadata it looks like the APIGateway for LV SingleSignOnService endpoint only supports HTTP-POST binding, while our digid_eherkenning package only supports HTTP-Redirect binding (Logius supports both => https://www.logius.nl/sites/default/files/public/bestanden/diensten/DigiD/Koppelvlakspecificatie-SAML-DigiD.pdf page 36, section 1.3/1.4)

joeribekker commented 2 years ago

Awesome find. I manually added the redirect binding to their metadata, which seems to be only half a solution (without it, we couldn't load the metadata at all - what now seems to be the correct behaviour since we need it)