Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-17044

Fix validity check of the SAML protocol message receiver endpoint

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 6.0-HF15, 7.3
    • Component/s: Authentication

      Description

      The base SAML2 message decoder triggers a check to determine if the SAML message's intended destination endpoint matches the actual recipient's endpoint.

      The method BaseSAMLMessageDecoder.getActualReceiverEndpointURI relies on HttpServletRequest.getRequestURL to determine the actual recipient URL but this is invalid behind a reverse proxy.

      This is a know issue for OpenSAML:

      https://issues.shibboleth.net/jira/browse/JOST-65

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                PagerDuty

                Error rendering 'com.pagerduty.jira-server-plugin:PagerDuty'. Please contact your Jira administrators.