Dejita proxy lo tallaabada soo dejinta metadata SAML ee Spring Security duugga ah

Barnaamij Spring Security SAML duug ah ayaa ka soo qaadan kara metadata bixiyaha aqoonsiga habka serverka isagoo isticmaalaya HTTPMetadataProvider. Soo dejintaas dibadda waxay isticmaashaa macmiilka HTTP ee la siiyay bixiyaha metadata.

Barnaamij isticmaalaya qaabka habaynta Spring Security SAML 1.0.x/OpenSAML 2, habee Apache Commons HttpClient-kiisa ka hor inta aan la shubin:

org.apache.commons.httpclient.HttpClient metadataHttpClient =
    new org.apache.commons.httpclient.HttpClient();
metadataHttpClient.getHostConfiguration()
    .setProxy("proxy.example", 8080);

U gudbi shaygaas la habeeyay sida doodda dhismaha macmiilka HTTP ee org.opensaml.saml2.metadata.provider.HTTPMetadataProvider, oo ay la socdaan timer-ka iyo URL-ka metadata ee jira. Habaynta XML, bean-ka macmiilka ee la tixraacay waa inuu noqdaa isla nuqulkan la habeeyay.

Hayso barkada parser-ka ee bixiyaha, habaynta cusboonaysiinta iyo maareeyaha metadata ee ku hareeraysan. Beddelka wadada ma beddelo mas'uuliyahaas.

URL-ka metadata waxa uu ahaanayaa URL-ka bixiyaha aqoonsiga. Host-ka proxy waxa uu ku taal macmiilka HTTP. URL metadata la ansixiyay oo dadweynuhu gaari karaan, musharrax HTTP ah oo ka yimid liiska proxy HTTP ayaa buuxin kara host-ka iyo dekedda macmiilkaas marka dhexdhexaadiyayaasha dadweynaha la oggolaaday oo aan la kaydin xogta gelitaanka proxy. Kani waa waddo soo qaadis dhinaca serverka: u leexashada browser-ka ee guulaysata ee bixiyaha aqoonsiga ma muujiso in serverka barnaamijku uu soo dejin karo ama cusboonaysiin karo metadata isagoo maraya xaddidaadka shabakiisa.

Isticmaal habayntan kaliya fasallada duugga ah ee halkan lagu magacaabay. Taageerada casriga ah ee Spring Security saml2 waxay isticmaashaa API kale, bean-ka loo qoray fidinta duugga ah lama beddeli karo habaynta metadata ee hadda.