[
https://issues.apache.org/jira/browse/NIFI-8241?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17288447#comment-17288447
]
ASF subversion and git services commented on NIFI-8241:
-------------------------------------------------------
Commit ebef823cb93539fede8c1fc10347253d33fdb9af in nifi's branch
refs/heads/main from Bryan Bende
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=ebef823 ]
NIFI-8241 This closes #4833. Set the SAML context provider to use the
EmptyStorageFactory
Signed-off-by: Joe Witt <[email protected]>
> SAML storage factory should use the empty impl instead of http session based
> ----------------------------------------------------------------------------
>
> Key: NIFI-8241
> URL: https://issues.apache.org/jira/browse/NIFI-8241
> Project: Apache NiFi
> Issue Type: Improvement
> Affects Versions: 1.13.0
> Reporter: Bryan Bende
> Assignee: Bryan Bende
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The spring-security-saml library has an interface called
> SAMLMessageStorageFactory and by default will us an implementation based on
> HTTP session storage.
> The documentation describes how this can easily be changed to a no-op empty
> implementation:
> [https://docs.spring.io/spring-security-saml/docs/current/reference/html/chapter-troubleshooting.html#d5e1935]
> Since NiFi is not session based, we should switch the empty impl.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
