Bug 62382 - Authorize Access checker to reply with a 302 code
Summary: Authorize Access checker to reply with a 302 code
Status: NEW
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_fcgid (show other bugs)
Version: 2.5-HEAD
Hardware: PC Linux
: P2 enhancement (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-05-17 20:36 UTC by Xavier Guimard
Modified: 2018-05-17 20:36 UTC (History)
0 users


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Xavier Guimard 2018-05-17 20:36:10 UTC 
Hello,

FcgidAccessChecker restricts response to 200, 401, 403 only. With a SSO system, Access Checker should be able to reply with a 302 code to give SSO url.

I'm developer of https://lemonldap-ng.org a full SSO system. Until now, we use a PerlAccessHandler to do this. We would like to replace our Perl Handler by an external FastCGI server (to build a sort of SSOaaS, see https://lemonldap-ng.org/documentation/2.0/ssoaas). But for now, we can't do it with Apache since FcgidAccessChecker does not permits 302 redirection, neither add headers to authorized queries.

Contact me if this is not clear (I'm not English native ;-))

Best regards,
Xavier