Enable shibboleth for non KIT ilias

[PinieP]

This pull request adds support for shibboleth login to (non KIT) ilias-web crawler.

[I-Al-Istannen]

Thanks!

This looks like a relatively straight-forward change, but you reformatted quite a few files to a smaller width. Can you please revert those changes? They make the text a bit harder, and the diff much harder to read :) I guess your editor just did not pick up on the 110 defined in the pyproject.toml file.

[I-Al-Istannen]

Hey, it would be cool if you could resolve the comments you have addressed in the UI (and maybe address the remaining two) when you have time :) That makes it a bit easier to see if action from our side is required and prevents us three deadlocking :P

[PinieP]

Should be all done now, thanks. Be sure to tell me if there's anything else in here that I need to address.

[I-Al-Istannen]

I have no idea why, but the 302 redirect does not work for KIT. It gets rejected with a "message does not meet security requirements", but no further mention why. Opening the same URL in a fresh browser window works. Shib really doesn't like the PFERD request though, even when it looks virtually identical.

I have no real idea why, but I can therefore not merge this. The old POST workflow works for KIT, so maybe just fall back to that one in the KIT case and let the rest fend for themselves.

[I-Al-Istannen]

@PinieP does this still work on your instance? Please make very sure it is not reusing any cookies. Ideally you would download a folder into a fresh directory in /tmp to ensure no cookies are reused (and maybe have a look at the --explain) output to ensure it is not loading any cookies.

[PinieP]

Still works for me. Thanks!

[I-Al-Istannen]

Thanks :)