Error implementing this about singlesignonidentityproviderbundle

[korotovsky]

Looks like Symfony has removed uri_signer.class parameter in release that you use. I'll try to provide a quick fix soon.

This issue was fixed in the korotovsky/sso-idp-bundle@~3.0. Please use this version constraint

[marvoh]

Another error experienced,

"Target path not specified" at 'vendor/korotovsky/sso-idp-bundle/src/Krtv/Bundle/SingleSignOnIdentityProviderBundle/Controller/SingleSignOnController.php line 29

[korotovsky]

@marvoh When SP redirects (or IdP security handler) user to IdP it should also append _target_path parameter with correct value. Please check an example here: https://github.com/korotovsky/SingleSignOnIdentityProviderBundle/blob/0.3.x/tests/Krtv/Bundle/SingleSignOnIdentityProviderBundle/Tests/Controller/SingleSignOnControllerTest.php#L223

[mediafigaro]

Hello @korotovsky I have the same problem, where should I append _target_path parameter into the SP ? There is no controller, it's into the ServiceProvider ? eg. the link ^

when I go on my SP : http://service.sf I'm redirected to IDP : http://idp.sf/login?_otp_failure=1&_otp_failure_time=1500471910.3835&_hash=03efZYChjtbZCorjTrDfCNVX0EpoExKeYIE1z1UGGK8%3D

And /otp/validate/ == > /internal/v1/sso/ same route ?

thanks

[korotovsky]

Hi,

/otp/validate/ is a route on SP to make server-side, trusted request to your IdP.

/internal/v1/sso/ is a route that accepts a code that SP provided for verification and should respond with a model or throw bad request.

[mediafigaro]

ok, fine. In the login form, the target path is : ?

< input type="hidden" name="_target_path" id="_target_path" value="http://idp.sf/sso/login/?_failure_path=http%3A%2F%2Fidp.sf%2Fsso%2Flogin%3F_target_path%3Dhttp%253A%252F%252Fservice.sf%252Fapp_dev.php%252F%253F_hash%253DMD3NplbZW%25252BylHUDxQcvLG%25252FXMn71mnSts6tx9MQmbg1k%25253D&amp;_hash=UkT2K8tB1ydtsJTRCoZUgoAVs%2B8sjx8P2ttiCSYdpo8%3D&amp;_target_path=http%3A%2F%2Fservice.sf%2Fotp%2Fvalidate%2F%3F_target_path%3Dhttp%253A%252F%252Fservice.sf%252Fapp_dev.php%252F%253F_hash%253DMD3NplbZW%25252BylHUDxQcvLG%25252FXMn71mnSts6tx9MQmbg1k%25253D&amp;service=consumer1" / >

[korotovsky]

@mediafigaro See this test: https://github.com/korotovsky/SingleSignOnIdentityProviderBundle/blob/0.3.x/tests/Krtv/Bundle/SingleSignOnIdentityProviderBundle/Tests/Controller/SingleSignOnControllerTest.php#L223

[mediafigaro]

@korotovsky I try but it must be malformed : http://idp.sf/sso/login/?_target_path=http%3A%2F%2Fservice.sf%2Fotp%2Fvalidate%2F%3F_target_path%3Dhttp%3A%2F%2Fservice.sf%2F&_hash=aA6jVJkP12UYgWq2xYLK12BLkuD4kEy%2FDRscQgKMULg%3D => http://idp.sf/sso/login/?_hash=VwiArTpUP1weqGrSIEN%2FCteuG9qO1kUfeNGh9xTHOss%3D&_otp_failure=1&_otp_failure_time=1500543713.9806 (url malformed, _target_path missing)

[mediafigaro]

@korotovsky my url couldn't be validated because of the tld : locally I use .sf with docker. Switched to .com, finner. I just don't see where to append / add the _target_path ?

in the login form (Step 9: Add redirect path to login form) = this value is posted.

When I access my SP I'm redirected to : IDP/login?_otp_failure=1&_otp_failure_time=1501253793.2919&_hash=1XDY.... without _target_path

Where should it be inserted please ?

[mediafigaro]

that's handled by the LoginSuccessHandler, this is well configured ?

    main:
        pattern:    ^/
        security:   true
        anonymous:  true
        http_basic:
            realm: "Secured Demo Area"
        form_login:
            login_path: login
            check_path: login
            success_handler: app_bundle.security.login_success_handler
        logout:
            path: /logout
            success_handler: app_bundle.security.logout_success_handler