[keycloak-dev] Keycloak's SAML AuthnResponse uses wrong binding
John Dennis
jdennis at redhat.com
Thu Apr 21 19:57:04 EDT 2016
On 04/18/2016 09:28 AM, Bill Burke wrote:
> Its spec compliance, a quick fix, and makes things simpler.
Sorry for the delay in responding, I was out on PTO.
Thank you for making the change.
Spec compliance should always be a priority.
>
> On 4/18/2016 9:26 AM, Stian Thorgersen wrote:
>> We're way past feature freeze and need to carefully consider including
>> more changes for 1.9.x.
>>
>> Unless this is required, which from my understanding it's not, we
>> create a JIRA issue for 2.x and post-pone.
>>
>> On 18 April 2016 at 15:03, Pedro Igor Silva <psilva at redhat.com
>> <mailto:psilva at redhat.com>> wrote:
>>
>> +1
>>
>> ----- Original Message -----
>> From: "Bill Burke" <bburke at redhat.com <mailto:bburke at redhat.com>>
>> To: "Pedro Igor Silva" <psilva at redhat.com <mailto:psilva at redhat.com>>
>> Cc: "John Dennis" <<mailto:jdennis at redhat.com>jdennis at redhat.com>,
>> keycloak-dev at lists.jboss.org
>> <mailto:keycloak-dev at lists.jboss.org>, "Nathan Kinder"
>> <nkinder at redhat.com <mailto:nkinder at redhat.com>>
>> Sent: Monday, April 18, 2016 9:47:43 AM
>> Subject: Re: [keycloak-dev] Keycloak's SAML AuthnResponse uses
>> wrong binding
>>
>>
>>
>> On 4/18/2016 7:23 AM, Pedro Igor Silva wrote:
>> >> IMO, what the bug fixes should be are:
>> >> * Make sure "Force POST Binding" is on by default (High Priority)
>> > As John pointed out ...
>> >
>> > Don't you think that in 2.0 you can just do POST and remove that
>> "Force POST Binding" switch ?
>>
>> I would just do it now. It is a easy fix and makes configuration that
>> much simpler. If you agree I'll just change it.
>>
>> --
>> Bill Burke
>> JBoss, a division of Red Hat
>> http://bill.burkecentral.com
>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev at lists.jboss.org <mailto:keycloak-dev at lists.jboss.org>
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
>>
>
> --
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com
>
>
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
John
More information about the keycloak-dev
mailing list