touch-packages team mailing list archive

Thread
Date

[Bug 1452142] Re: [webapp-container] Remember SAML providers in URL patterns

To: touch-packages@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <1452142@xxxxxxxxxxxxxxxxxx>
Date: Thu, 11 Jun 2015 20:22:34 -0000
Reply-to: Bug 1452142 <1452142@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

This bug was fixed in the package webbrowser-app -
0.23+15.10.20150610-0ubuntu1

---------------
webbrowser-app (0.23+15.10.20150610-0ubuntu1) wily; urgency=medium

  [ Alexandre Abreu ]
  * Ensure SAML requests are followed even if the app is interrupted and
    restarted. (LP: #1451432, #1452142)
  * Handle desktop download by forwarding to the default browser (LP:
    #1309657)

  [ Olivier Tilloy ]
  * Update translation template.
  * Updated bzr ignore rules.

 -- CI Train Bot <ci-train-bot@xxxxxxxxxxxxx>  Wed, 10 Jun 2015 12:36:43
+0000

** Changed in: webbrowser-app (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu.
https://bugs.launchpad.net/bugs/1452142

Title:
  [webapp-container] Remember SAML providers in URL patterns

Status in Webapps Team Task Tracking Project:
  In Progress
Status in Web Browser App:
  Invalid
Status in webbrowser-app package in Ubuntu:
  Fix Released

Bug description:
  The implementation of the fix for bug 1451432 adds the SAML provider
  site to the list of the allowed URL patterns, so that the SAML
  provider's website will be opened within the webapp-container itself
  and not being delegated to the browser.

  This is working fine, but we recently noticed that sometimes Google
  redirects the user to the SAML provider's website without passing the
  "SAMLRequest" parameter in the URL query; when that happens, the
  webapp container will delegate the opening of that page to the
  browser, since the URL is not in the allowed URL patterns.

  The proposed solution is for the webapp-container to store the SAML
  provider's URL somewhere in a config file, and always append the
  contents of that file to the list of the allowed URL patterns.

To manage notifications about this bug go to:
https://bugs.launchpad.net/webapps-sprint/+bug/1452142/+subscriptions