Parcourir la source

HUE-2458 [core] Expose a POST logout URL

This is not backwards compatible with the old djangosaml2
Erick Tryzelaar il y a 11 ans
Parent
commit
9367478d42

+ 2 - 1
desktop/libs/libsaml/src/libsaml/saml_settings.py

@@ -54,10 +54,11 @@ SAML_CONFIG = {
         'assertion_consumer_service': [
           ("%s/saml2/acs/" % BASE_URL, saml2.BINDING_HTTP_POST),
         ],
-        # url and binding to the single logout service view
+        # url and binding to the logout service view
         # do not change the binding or service name
         'single_logout_service': [
           ("%s/saml2/ls/" % BASE_URL, saml2.BINDING_HTTP_REDIRECT),
+          ("%s/saml2/ls/post/" % BASE_URL, saml2.BINDING_HTTP_POST),
         ],
       },
 

+ 5 - 2
desktop/libs/libsaml/src/libsaml/views.py

@@ -18,7 +18,9 @@ from django.views.decorators.http import require_POST
 from django.views.decorators.csrf import csrf_exempt
 
 from djangosaml2.views import login, echo_attributes, metadata,\
-							  assertion_consumer_service, logout_service
+                              assertion_consumer_service, \
+                              logout_service_redirect, \
+                              logout_service_post
 
 import libsaml.conf
 
@@ -33,7 +35,8 @@ def acs(request, config_loader_path=None, attribute_mapping=None, create_unknown
   return assertion_consumer_service(request, config_loader_path, attribute_mapping, create_unknown_user, username_source)
 
 
-setattr(logout_service, 'login_notrequired', True)
+setattr(logout_service_redirect, 'login_notrequired', True)
+setattr(logout_service_post, 'login_notrequired', True)
 setattr(login, 'login_notrequired', True)
 setattr(echo_attributes, 'login_notrequired', True)
 setattr(acs, 'login_notrequired', True)