simplesamlphp中的HTTP POST binding方法_samlrequest 提交方式 post-CSDN博客

本文链接：https://blog.csdn.net/qq_31442743/article/details/112847808

最近在学习saml协议，本文主要讲解了simplesamlphp中的http post binding方法。

SAML 2.0 binding主要有以下几种方式。

SAML SOAP Binding (based on SOAP 1.1)
Reverse SOAP (PAOS) Binding
HTTP Redirect Binding
HTTP POST Binding
HTTP Artifact Binding
SAML URI Binding

其中http post是使用最多的一种方式。

HTTP POST bind方法

实现HTTP POST Bind通常是通过在html页面中嵌入一个hidden的form，在加载的时候进行submit进行实现的。
例如，SAMLRequest

  <form method="post" action="https://idp.example.org/SAML2/SSO/POST" ...>
    <input type="hidden" name="SAMLRequest" value="''request''" />
    ... other input parameter....
  </form>

例如SAMLResponse

  <form method="post" action="https://sp.example.com/SAML2/SSO/POST" ...>
    <input type="hidden" name="SAMLResponse" value="''response''" />
    ...
  </form>

在html的最前面加上下面一行代码

  window.onload = function () { document.forms[0].submit(); }

这样就实现了在页面加载的时候就进行了跳转。当然浏览器必须要支持javascript才可以，如果不支持的话，则不能自动进行跳转。

下面有一个完整的例子，可以显示这个过程。

完整例子

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8" />
    <title>POST data</title>
    <script src="/simplesaml/resources/post.js"></script>
    <link type="text/css" rel="stylesheet" href="/simplesaml/resources/post.css" />
</head>
<body onload="document.forms[0].submit()">

    <noscript>
        <p><strong>Note:</strong> 
        Since your browser does not support JavaScript, 
        you must press the button below once to proceed.</p> 
    </noscript> 

    <form method="post" 
        action="https://dc1.hitest.com/adfs/ls/idpinitiatedsignon">
    <!-- Need to add this element and call click method, because calling 
    submit() on the form causes failed submission if the form has another 
    element with name or id of submit.
    See: https://developer.mozilla.org/en/DOM/form.submit#Specification -->
    <input type="submit" id="postLoginSubmitButton"/>
<input type="hidden" name="SAMLRequest" value="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" /><input type="hidden" name="RelayState" value="https://10.206.72.55/doLogin.php?action=saml&amp;forward=http://www.163.com/" /><input type="hidden" name="username" value="" /><input type="hidden" name="username1" value="" /><input type="hidden" name="username2" value="" /><input type="hidden" name="SupportNTLM" value="" /><input type="hidden" name="notice" value="" />        <noscript>
            <button type="submit" class="btn">Submit</button>
        </noscript>
    </form>

</body>
</html>