Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LogoutRequestID is in $_SESSION but no LogoutRequest/LogoutResponse found in headers #31

Open
simevo opened this issue Aug 11, 2018 · 0 comments

Comments

@simevo
Copy link
Owner

simevo commented Aug 11, 2018

if you reproduce #2 (comment) then your $_SESSION has a LogoutRequestID

now visit /login.php and you'll get error 500:

Sat Aug 11 09:05:03 2018] PHP Fatal error:  Uncaught OneLogin\Saml2\Error: SAML LogoutRequest/LogoutResponse not found. Only supported HTTP_REDIRECT Binding in /srv/spid-php2/vendor/onelogin/php-saml/src/Saml2/Auth.php:317
Stack trace:
#0 /srv/spid-php2/src/Strategy/SpOneLogin.php(106): OneLogin\Saml2\Auth->processSLO(false, 'ONELOGIN_4dc8cc...')
#1 /srv/spid-php2/src/Sp.php(48): Italia\Spid2\Strategy\SpOneLogin->isAuthenticated()
#2 /srv/spid-php2/example/login.php(8): Italia\Spid2\Sp->isAuthenticated()
#3 {main}
  thrown in /srv/spid-php2/vendor/onelogin/php-saml/src/Saml2/Auth.php on line 317

the reason is that at this line it is looking for LogoutRequest or LogoutResponse in the headers but nothing is found

@simevo simevo changed the title LogoutRequestID is in $_SESSION but no LogoutRequest/LogoutResponse not found in headers LogoutRequestID is in $_SESSION but no LogoutRequest/LogoutResponse found in headers Aug 11, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant