Don't know simpleSamL but I know that since we already used an old-school post form in drupal, we just redirect users who are not logged in there. Then php sets the cookie, then we redirect back to the angular app if need be (a url param determines this). Once Angular is loaded we can verify the cookie via $http or websockets.
But we didn't make the best choices there, but it was the quickest so we could focus on the app.. there are much better login approaches out there... just sharing our approach. On Friday, April 18, 2014 4:28:20 AM UTC-6, Andrius Kulbis wrote: > > Hi, > > I came across with this AngularJs thing, and I thing it is awesome, really > solves many problems I confronted while working on my last WebApp with just > a few lines of code. Now, what I didn't find or was looking in bad places > is the protection of AngularJs app with SSO (simpleSAMLphp Identity > provider). How to deal with this? > What I am going to build will use Pyramid framework as a backend REST API, > and AngularJs (I wish) for the frontend. But how to protect the app from > unauthorized access, skipping the sso login. Any implementation example or > lessons working on similar case would help (may be with php, ruby backends > and SSO etc) > > Regards, > Andrius > -- You received this message because you are subscribed to the Google Groups "AngularJS" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/angular. For more options, visit https://groups.google.com/d/optout.
