As described in #1935, we want to visually hide the SAMLRequest in the user's URL bar. Currently, the full SAMLRequest is visible in the WAYF screen, for example.
There is no security reason to hide this, we simple want to prevent users from bookmarking such URLs because using those days or months later leads to strange errors later in the chain.
Some simple javascript in the frontend page should be enough to fix this.
Suggestion: replace the original url
When the user accesses this page, we need to show a specific error page. Will describe this in a separate ticket (#1976)
As described in #1935, we want to visually hide the SAMLRequest in the user's URL bar. Currently, the full SAMLRequest is visible in the WAYF screen, for example.
There is no security reason to hide this, we simple want to prevent users from bookmarking such URLs because using those days or months later leads to strange errors later in the chain.
Some simple javascript in the frontend page should be enough to fix this.
Suggestion: replace the original url
by
When the user accesses this page, we need to show a specific error page. Will describe this in a separate ticket (#1976)