Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GET method not allowed on /saml2/acs/ #356

Open
jastorquia opened this issue Oct 26, 2022 · 1 comment
Open

GET method not allowed on /saml2/acs/ #356

jastorquia opened this issue Oct 26, 2022 · 1 comment
Labels

Comments

@jastorquia
Copy link

With our latest production deployment with django upgrade we are now seeing errors requests coming in to /saml2/acs/ using the GET method are no longer being allowed. Is there a way to configure the AssertionConsumerServiceView to allow GET? While we understand that calls should be coming in to post() only, it appears that at least some IDPs are making GET calls and this stopped working. Any assistance would be very much appreciated. Thanks.

@peppelinux
Copy link
Member

Hi, you should have to inherit this class and create the get method
https://github.com/IdentityPython/djangosaml2/blob/master/djangosaml2/views.py#L440

to assure a good security by default in djangosaml2 we don't implement the get method for ACS endpoint, you can define it by yourself and if you have any question you're welcome

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants