search

spring-projects / spring-security

Spring Security
http://spring.io/projects/spring-security
Apache License 2.0
8.8k stars 5.9k forks source link

SAML2 for reactive environment / spring-webflux #7954

Open Dav1dde opened 4 years ago

Dav1dde commented 4 years ago

Summary

From what I can tell the recently added SAML2 support only supports Spring MVC or more generally servlet based requests. Any plans to add spring-webflux support?

Larry-JJ commented 3 years ago

May I know is there any progress on spring security saml support spring webflux?

jzheaux commented 3 years ago

There has not yet been progress as other items have taken priority.

If several community members start voting for this item, it's something that we could consider moving up the list.

rwinch commented 3 years ago

Another consideration is that we would need a reactive SAML library

hofsa commented 3 years ago

With "Spring Cloud 2020", the module spring-cloud-netflix-zuul has been removed.

Therefore, there is currently no official supported way to implement an API-Gateway with SAML2 support.

Could you recommend any work-arounds for an API-Gateway with SAML2 on the "Spring Cloud 2020" - stack?

rwinch commented 3 years ago

There really isn't an easy workaround. You would need to create an AuthenticationWebFilter that processes the SAMLResponse without blocking.

mohanarpit commented 3 years ago

Just wanted to ask if SAML support is still being considered for spring-webflux. It'll be great to have this officially in spring-security because a lot of Identity Providers use SAML.

mraible commented 3 years ago

a lot of Identity Providers use SAML.

True, but using SAML in 2021 is like using SOAP instead of REST. ;)

shahsohil123 commented 3 years ago

There are enough legacy projects out there that still use SAML and there is no way to get around it. It will be nice to have SAML support added at some point.

jornfranke commented 1 year ago

I would be also very interested...

ben12 commented 9 months ago

Interested too...