[
https://issues.apache.org/jira/browse/GUACAMOLE-808?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18095345#comment-18095345
]
David Bateman commented on GUACAMOLE-808:
-----------------------------------------
Ok, I've gotten it to work within the context of my OpenID PR, and it should
work with every other authentication provider, with the exception of CAS and
SAML that will need to have thier session manager adapted. See [the commit to
my PR
#1219|https://github.com/apache/guacamole-client/pull/1219/changes/725040f14781055c964aeae59b4319d2a70c06fc].
It really is quite intrusive to get this to work, so I'm unsure if this is
acceptable... So I'd really like some feedback of if this is the right
approach, if there isn't some other means of doing the same thing in an easier
manner, or whether this should be done at all.
Cheers
> Support redirecting to originally requested URL after successful SSO login
> --------------------------------------------------------------------------
>
> Key: GUACAMOLE-808
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-808
> Project: Guacamole
> Issue Type: Improvement
> Components: guacamole, guacamole-auth-sso-cas,
> guacamole-auth-sso-openid, guacamole-auth-sso-saml
> Reporter: Parth Mishra
> Priority: Minor
>
> Upon successful authentication via OIDC, the user is returned to the redirect
> URI (e.g. {{https://myserver.com/guacamole/}}) even if they were requesting
> another Guacamole resource such as a Connection link. It would be nice if the
> user could be routed to the requested resource after successful
> authentication.
> This way, if they were to click a direct link to a guacamole Connection they
> have access too, the successful authentication via the IDP can reroute them
> directly to the requested connection URL rather than the guacamole UI.
> Typically this is done with encoding the request URL with the "state"
> parameter of OIDC and verifying with the nonce.
> This feature could be really useful for relying on custom frontends without
> having to modify or reimplement the web app.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
