Skip to content

Is this the correct contextIdentifier? #34

@mefarazath

Description

@mefarazath

Noticed we are using request.getRequestedSessionId() as the context identifier in [1]? Is this the expected one? We usually use sessionDataKey as in [2] as the context identifier or in the case of OAuth we use the 'state' parameter.

[1]

public String getContextIdentifier(HttpServletRequest request) {
return request.getRequestedSessionId();
}

[2] https://github.com/wso2-extensions/identity-outbound-auth-passive-sts/blob/master/components/org.wso2.carbon.identity.application.authenticator.passive.sts/src/main/java/org/wso2/carbon/identity/application/authenticator/passive/sts/PassiveSTSAuthenticator.java#L130-L149

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions