SAML metadata Content-Type should be application/samlmetadata+xml

spring-projects / spring-security

Spring Security

http://spring.io/projects/spring-security

Apache License 2.0

8.55k stars 5.79k forks source link

SAML metadata Content-Type should be application/samlmetadata+xml #15147

Closed OrangeDog closed 4 days ago

OrangeDog commented 1 month ago

Expected Behavior The IANA-registered MIME type for SAML metadata is application/samlmetadata+xml.

Current Behavior The Saml2MetadataFilter responds with Content-Type: application/xml.

Context Not a big deal for human users looking to save and/or copy-paste the data, but automated tools may care, and standards should be followed where possible.