Giters

nginx-shib / nginx-http-shibboleth

Shibboleth auth request module for nginx

Home Page:https://github.com/nginx-shib/nginx-http-shibboleth/wiki

Repository from Github https://github.comnginx-shib/nginx-http-shibbolethRepository from Github https://github.comnginx-shib/nginx-http-shibboleth

Add setting to disable copying variables as headers

davidjb opened this issue · comments

commented

mod_shib for Apache has ShibUserHeaders to control whether attributes get passed as headers to the backend, and we should aim for a similar toggle. Without automatically copying headers, it's possible and more secure (see README) to copy attributes from the auth request into the backend's environment -- but it currently requires manual handling in the user's config.

FYI: https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig

commented

Implemented in develop; added in ade5cfd.