Add fixes for djangosaml2

inducer · Apr 19, 2021 · 5377ce8 · 5377ce8
1 parent ab6100b
commit 5377ce8
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/local_settings_example.py b/local_settings_example.py
@@ -538,6 +538,12 @@
         "service": {
             "sp": {
                 "name": "RELATE SAML2 SP",
+
+                # Django sets SameSite attribute on session cookies,
+                # which causes problems. Work around that, for now.
+                # https://github.com/peppelinux/djangosaml2/issues/143#issuecomment-633694504
+                "allow_unsolicited": True,
+
                 "name_id_format": saml2.saml.NAMEID_FORMAT_TRANSIENT,
                 "endpoints": {
                     # url and binding to the assertion consumer service view

diff --git a/relate/settings.py b/relate/settings.py
@@ -89,6 +89,8 @@
     "relate.utils.MaintenanceMiddleware",
     "social_django.middleware.SocialAuthExceptionMiddleware",
 )
+if local_settings.get("RELATE_SIGN_IN_BY_SAML2_ENABLED"):
+    MIDDLEWARE = MIDDLEWARE + ("djangosaml2.middleware.SamlSessionMiddleware",)
 
 # }}}
 
@@ -333,6 +335,8 @@
 
 SAML_CREATE_UNKNOWN_USER = True
 
+SAML_SESSION_COOKIE_NAME = 'relate_saml_session'
+
 # }}}
 
 # vim: foldmethod=marker