how do I change callback route?

[altV]

not sure what to change to support custom callback routes

[jrdoane]

There should never be a "callback" to a route after the SAML handlers have done their magic because you need to run all the middleware that exists for the route that you want to go to. A little more information about what you're trying to do might help me explain what you should do. Depending on how you have your routes built up, you have different options on how and when to utilize the SAML information that came back.

For VLACS, our Clojure application that uses this library makes some helmsman routes out of the already created handlers in saml20-clj but, relies on a middleware to redirect unauthenticated users to the SAML route. Once SAML has returned authentication data, clj-saml20 should redirect you to the RelayState (where did you try going before SSO took place.) At this point, the saml20-clj libraries should have added information to the current session which the middleware that will run again to check auth, can use to confirm the user's identity.

The Middleware that is currently in Informer to require login looks something like this:

(defn require-login
  [handler]
  (fn require-login-middleware-fn
    [request]
    (if (get-in request [:session :informer/sis-user] nil)
      (handler request)
      (if-let [saml20 (get-in request [:session :saml20])]
        (if-let [sis-user (db.user/get-by-id
                            (:informer request)
                            (get-in
                              (first (:assertions saml20))
                              [:name-id :value]))]
          (handler
            (update-in
              request [:session]
              #(assoc % :informer/sis-user sis-user
                      :uid (:sis_user_id sis-user))))
          {:status 500
           :body "SAML assertion contains an unknown user."})
        {:status 303
         :headers {"Location"
                   (str
                     (helmsman.navigation/assemble-relative-uri
                       request :saml20-clj/endpoint)
                     "?continue="
                     (helmsman.uri/assemble
                       (helmsman.uri/relative-uri
                         (:path
                          (helmsman.navigation/get-route-by-id
                           request :saml20-clj/endpoint))
                         (get-in
                           request [:helmsman :current-route :path]))))}
         :body ""}))))

[akhudek]

I've noticed that the "/saml" get route doesn't actually do anything. I assume it's supposed to forward to the saml provider?