Saita wakili don saukar da metadata na SAML a tsohon Spring Security

Tsohuwar manhajar Spring Security SAML na iya debo metadata na mai bayar da shaida daga aikin uwar garke ta amfani da HTTPMetadataProvider. Wannan saukarwar waje tana amfani da abokin ciniki na HTTP da aka ba mai bayar da metadata.

Ga manhaja da ke amfani da salon saitin Spring Security SAML 1.0.x/OpenSAML 2, saita Apache Commons HttpClient nata kafin a saka shi:

org.apache.commons.httpclient.HttpClient metadataHttpClient =
    new org.apache.commons.httpclient.HttpClient();
metadataHttpClient.getHostConfiguration()
    .setProxy("proxy.example", 8080);

Ba da wannan abin da aka saita a matsayin hujjar maginin abokin ciniki na HTTP na org.opensaml.saml2.metadata.provider.HTTPMetadataProvider, tare da mai lokaci da URL na metadata da ke akwai. A cikin saitin XML, bean na abokin ciniki da aka ambata dole ne ya zama wannan misalin da aka saita.

Ka rike tafkin mai nazari na yanzu na mai bayarwa, saitin sabuntawa da mai kula da metadata da ke kewaye. Canza hanyar ba ya maye gurbin wadannan ayyuka.

URL na metadata ya kasance URL na mai bayar da shaida. Mai masaukin wakili ya kasance a kan abokin ciniki na HTTP. Don URL na metadata da aka amince da shi kuma jama'a za su iya isa, dan takarar HTTP daga jerin wakilan HTTP na iya cika mai masauki da tashar wannan abokin ciniki idan an yarda da masu shiga tsakani na jama'a kuma ba a ajiye bayanan shiga na wakili. Wannan hanya ce ta debo a bangaren uwar garke: nasarar juya mai bincike zuwa mai bayar da shaida ba ya nuna cewa uwar garken manhaja na iya saukar da ko sabunta metadata ta takunkumin cibiyar sadarwarta.

Yi amfani da wannan saitin kawai don tsofaffin azuzuwan da aka ambata a nan. Tallafin Spring Security saml2 na zamani yana amfani da wata API, kuma bean da aka rubuta don tsohon kari ba ya iya musanya da saitin metadata na yanzu.