Lungiselela i-proxy yokulanda i-metadata ye-SAML ku-Spring Security endala

Lungiselela i-HTTP client efakwa ku-Spring Security SAML HTTPMetadataProvider endala ukuze kulandwe i-metadata ohlangothini lweseva.

Uhlelo lwe-Spring Security SAML oludala lungalanda i-metadata yomhlinzeki wobunikazi kusuka kunqubo yeseva lisebenzisa i-HTTPMetadataProvider. Lokho kulanda kwangaphandle kusebenzisa i-HTTP client enikezwe umhlinzeki we-metadata.

Kuhlelo olusebenzisa isitayela sokuhlela se-Spring Security SAML 1.0.x/OpenSAML 2, lungiselela i-Apache Commons HttpClient yalo ngaphambi kokufakwa:

org.apache.commons.httpclient.HttpClient metadataHttpClient =
    new org.apache.commons.httpclient.HttpClient();
metadataHttpClient.getHostConfiguration()
    .setProxy("proxy.example", 8080);

Dlulisa leyo nto elungisiwe njengempikiswano yomakhi we-HTTP client ye-org.opensaml.saml2.metadata.provider.HTTPMetadataProvider, kanye nesikhathi kanye ne-URL ye-metadata ekhona. Ekuhleleni kwe-XML, i-bean yeklayenti okubhekiselwa kuyo kumele ibe yiso lesi sikhathi esilungisiwe.

Gcina iqoqo lamaphesa elikhona lomhlinzeki, ukuhlela kokuvuselela kanye nomphathi we-metadata ozungezile. Ukushintsha umzila akuzithathi indawo lezo zibopho.

I-URL ye-metadata ihlala iyiyo ye-URL yomhlinzeki wobunikazi. I-host ye-proxy iseklayenti le-HTTP. Nge-URL ye-metadata evunyelwe futhi efinyeleleka emphakathini, umuntu wesicelo se-HTTP ovela ohlwini lwama-proxy e-HTTP angagcwalisa i-host ne-port yalelo klayenti uma abalamuli bomphakathi bevunyelwe futhi kungekho zifakaziso ze-proxy ezigciniwe. Lena indlela yokuthola ohlangothini lweseva: ukudluliselwa okuphumelelayo kwesiphequluli kumhlinzeki wobunikazi akubonisi ukuthi iseva yohlelo ingalanda noma ivuselele i-metadata ngemikhawulo yayo yenethiwekhi.

Sebenzisa lokhu kuhlela kuphela kumakilasi amadala ashiwo lapha. Ukusekelwa kwesimanje kwe-Spring Security saml2 kusebenzisa enye i-API, futhi i-bean ebhalelwe isandiso esidala ayikwazi ukushintshwa ngokuhlela kwayo kwamanje kwe-metadata.

Izihloko ezihlobene