kjunichi

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>

int main(int argc, char **argv) {
   //system("export HOGEHOGE=\"abc\"");
   // setenv("HOGEHOGE","abd",1); 
    //putenv("HOGEHOGE=abz");
    printf("HOGEHOGE=%s\n", getenv("HOGEHOGE"));
    

kjunichi

shell

case _${foo} in
 _FOO)
 :;;

kjunichi

MellonSPMetadataFile MellonSPPrivateKeyFile

[Tue Apr 18 12:22:06.631392 2023] [ssl:warn] [pid 1:tid 140138125364544] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Tue Apr 18 12:22:06.632997 2023] [mpm_event:notice] [pid 1:tid 140138125364544] AH00489: Apache/2.4.57 (Unix) OpenSSL/1.1.1n configured -- resuming normal operations
[Tue Apr 18 12:22:06.633022 2023] [core:notice] [pid 1:tid 140138125364544] AH00094: Command line: 'httpd -D FOREGROUND'

(process:9): Lasso-CRITICAL **: 12:22:35.941: 2023-04-18 12:22:35 (server.c/:808) Failed to load metadata from preloaded buffer

kjunichi

docker logs 6ff84eaff48d

kjunichi

SAML においては、Assertion とトークンは同じ意味

SAML認証に成功するとコールバックURLに以下のパラメータがPOSTされる

SAMLResponse

トークンの暗号化はAzure ADではオプション扱い。。

kjunichi

SAMLアサーション

kjunichi

AADSTS700016: Application with identifier 'http://localhost:8080/saml2/service-provider-metadata/one' was not found in the directory '既定のディレクトリ'. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.

kjunichi

>gradlew :servlet:spring-boot:java:saml2:login:bootRun
Downloading https://services.gradle.org/distributions/gradle-7.5.1-bin.zip
...........10%............20%...........30%............40%...........50%............60%...........70%............80%...........90%............100%

Welcome to Gradle 7.5.1!

Here are the highlights of this release:
 - Support for Java 18
 - Support for building with Groovy 4
 - Much more responsive continuous builds

kjunichi

demoSaml:test: Could not find org.opensaml:opensaml-core:4.1.1. Required by: project : > org.springframework.security:spring-security-saml2-service-provider:6.0.2

Possible solution:

• Declare repository providing the artifact, see the documentation at https://docs.gradle.org/current/userguide/declaring_repositories.html

kjunichi

JSONベースでの認証APIを作成

以下のクラスを継承した

• UsernamePasswordAuthenticationFilter
• AuthenticationProvider
• UserDetails 要らないかも

curlコマンドの操作