From: Demian K. <dem...@vi...> - 2017-02-22 17:54:04
|
Cornelius, I just double-checked this against the latest master, and Shibboleth login seems to be working as I would expect it to. I can go to any arbitrary URL within VuFind, click "Institutional Login" in the header, and get redirected back to the page I came from after the login process. Note that the links are not pointing directly at Shibboleth.sso/Login, but rather at the internal VuFind MyResearch/UserLogin page. It is this page which updates the session with the referrer prior to redirecting to Shibboleth, which allows that state to be restored upon return. I can't remember exactly when this was introduced, but I think it has been around for quite a while. Is it possible that you have a custom header template that is pointing to a different route than the default header template? - Demian -----Original Message----- From: Cornelius Amzar [mailto:cor...@bs...] Sent: Friday, February 17, 2017 2:20 AM To: Demian Katz; vuf...@li...; Winkler, Stefan Subject: Re: [VuFind-Tech] Shibboleth Login -> Redirect to MyResearch/Home Hi Demian, first enjoy your vacation! I think you should be able to reproduce it. The sessionInitiator called in header.phtml and printing the "Login" link returns /Shibboleth.sso/Login. So the referer is not saved saved. The referer is saved in /MyResearch/Login action, so I guess other auth methods are pointing here first? Just place a dump here to see the saved referer. Cornelius Am 16.02.2017 um 17:06 schrieb Demian Katz: > Cornelius, > > > I'll try to give this another look when I get back from vacation next > week. Unfortunately, since I don't have a Shibboleth instance to test > with, I can only simulate the workflow, so that may be the reason I'm > not seeing the same problem that you describe. I'd be very interested > to hear from other Shibboleth users. I was really under the impression > that we had gotten this problem sorted out, but because it's so hard > for me to test, it's certainly possible that something has gone wrong.... > > > - Demian > > > > ---------------------------------------------------------------------- > -- > *From:* Cornelius Amzar <cor...@bs...> > *Sent:* Thursday, February 16, 2017 10:11 AM > *To:* Demian Katz; vuf...@li...; Winkler, Stefan > *Subject:* Re: [VuFind-Tech] Shibboleth Login -> Redirect to > MyResearch/Home > > Hi Demian, > > You're right. The referer is saved in MyResearch/Login action. The > problem is Shibboleth uses an external login page (the IdP). The url > is set in config.ini, section Shibboleth, parameter login. It's > default points to /Shibboleth.sso/Login which is not under control of VuFind. > > So, there is no link pointing to /MyResearch/Login and then redirects > to /Shibboleth.sso/Login. That's why no referer is saved. > > Seems to be a bug still open in current master, as the > Shibboleth.sso/Login is still there. > > Regards, > Cornelius > > > > Am 13.02.2017 um 16:08 schrieb Demian Katz: >> Cornelius, >> >> My understanding about how this is supposed to work is that, when a >> login prompt is triggered, VuFind should store the referring page in >> the user's session. When Shibboleth returns control to VuFind by >> redirecting to MyResearch/Home, that should complete the login >> process and then redirect the user back to the original > referring page. >> >> I know that there have been some Shibboleth-related glitches in the history of VuFind, and I can't remember exactly what has changed since release 2.5 -- but that's at least my understanding of what should be happening. >> >> If you still need help following that basic conceptual overview, I can look back at the 2.5 code and point you in the direction of where you could try debugging.... >> >> - Demian >> >> -----Original Message----- >> From: Cornelius Amzar [mailto:cor...@bs...] >> Sent: Monday, February 13, 2017 8:35 AM >> To: vuf...@li...; Winkler, Stefan >> Subject: [VuFind-Tech] Shibboleth Login -> Redirect to >> MyResearch/Home >> >> Hello everybody, >> >> we're still running VuFind 2.5 and testing Shibboleth right now. >> >> After the login, the user is redirected to MyResearch/Home. If we configure another target, the login is not processed properly. >> >> The question: Is it possible to send the user back to the page that he/she visited when clicking the Login button? That would be much nicer. >> And is a default behavior in most web applications I know. >> >> Thanks for any suggestions! >> >> Cornelius >> -- >> Cornelius Amzar, M.Sc. >> Bibliotheksservice-Zentrum Baden-Württemberg (BSZ) >> 78457 Konstanz / Germany >> E-Mail: cor...@bs... >> https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.b >> sz-bw.de&data=02%7C01%7Cdemian.katz%40villanova.edu%7C3d812c2281b3471 >> 3245708d4541820cd%7C765a8de5cf9444f09cafae5bf8cfa366%7C1%7C0%7C636225 >> 910000543626&sdata=MPuHpvK0E9nFyB62%2FI6Dzb2CmiaNsmvafTsxuLe07fg%3D&r >> eserved=0 >> >> --------------------------------------------------------------------- >> --------- Check out the vibrant tech community on one of the world's >> most engaging tech sites, SlashDot.org! >> https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsdm.l >> ink%2Fslashdot&data=02%7C01%7Cdemian.katz%40villanova.edu%7C3d812c228 >> 1b34713245708d4541820cd%7C765a8de5cf9444f09cafae5bf8cfa366%7C1%7C0%7C >> 636225910000543626&sdata=PW83oAmLefWc5s9XHZOLeaRwbe%2FGBcCZY4MhAwX%2F >> 4wU%3D&reserved=0 _______________________________________________ >> Vufind-tech mailing list >> Vuf...@li... >> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flist >> s.sourceforge.net%2Flists%2Flistinfo%2Fvufind-tech&data=02%7C01%7Cdem >> ian.katz%40villanova.edu%7C3d812c2281b34713245708d4541820cd%7C765a8de >> 5cf9444f09cafae5bf8cfa366%7C1%7C0%7C636225910000543626&sdata=Ghf9CgwM >> %2BYcbdpsgAeel2OiIhp%2BWbqgYZ2YrLolpqT0%3D&reserved=0 >> > > -- > Cornelius Amzar, M.Sc. > Bibliotheksservice-Zentrum Baden-Württemberg (BSZ) > 78457 Konstanz / Germany > E-Mail: cor...@bs... > https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.bs > z-bw.de&data=02%7C01%7Cdemian.katz%40villanova.edu%7C8b47c6091dc64ca9c > d7508d4567f88f5%7C765a8de5cf9444f09cafae5bf8cfa366%7C1%7C0%7C636228553 > 159034140&sdata=dkxDHGG9eYGHW37cOoDZn2NP1XzDgUk1d9JURLwy5y0%3D&reserve > d=0 -- Cornelius Amzar, M.Sc. Bibliotheksservice-Zentrum Baden-Württemberg (BSZ) 78457 Konstanz / Germany E-Mail: cor...@bs... https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.bsz-bw.de&data=02%7C01%7Cdemian.katz%40villanova.edu%7C98ec492713ba457f5eea08d457056dbd%7C765a8de5cf9444f09cafae5bf8cfa366%7C1%7C0%7C636229128218866989&sdata=aEXtC1v6x7Jv7NBYOn%2B1xubMOSXK4dVd5RiTx%2FCIMyY%3D&reserved=0 |