growi icon indicating copy to clipboard operation
growi copied to clipboard
verified publisher icon weseek

Improvement: AssertionConsumerServiceURL in SAML AuthnRequest is not changed when Site URL was changed

Open skomma opened this issue 3 years ago • 1 comments

Environment

Host

item version
OS
GROWI 5.1.3

How to reproduce? (再現手順)

  1. Start GROWI with Site URL https://aaa.com set and SAML auth enabled
  2. Go to the admin page, set https://bbb.com in the Site URL settings
  3. Logout
  4. Login with SAML

What happens? (症状)

  • AssertionConsumerServiceURL in SAML AuthnRequest is https://aaa.com/passport/saml/callback

What is the expected result? (期待される動作)

  • AssertionConsumerServiceURL in SAML AuthnRequest should be https://bbb.com/passport/saml/callback

Note

  • When SAML authentication is enabled and the Site URL is changed, it seems necessary to reload passport-saml.

skomma avatar Oct 19 '22 01:10 skomma

Not a bug.

We will add an alert to prompt the admin user to restart the server.

yuki-takei avatar Nov 07 '22 08:11 yuki-takei