The Login link needs to pass along a referrer param with the value of the page the user originated a Login action from. This gives the application a way to know when a user is coming back from shibboleth and then where to redirect them. Otherwise, the user will get re-redirected to nginx then shibboleth resulting in an idp error page for the stale request.
The
Login
link needs to pass along a referrer param with the value of the page the user originated a Login action from. This gives the application a way to know when a user is coming back from shibboleth and then where to redirect them. Otherwise, the user will get re-redirected to nginx then shibboleth resulting in an idp error page for the stale request.current Login url: (busted)
https://hydrox-dev.sul.stanford.edu/shib/login?locale=en
with referrer: (works)
https://hydrox-dev.sul.stanford.edu/shib/login?locale=en&referrer=https%3A%2F%2Fhydrox-dev.sul.stanford.edu%2F