[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-users
Subject:    RE: Handling database errors
From:       "Cantor, Scott" <cantor.2 () osu ! edu>
Date:       2017-08-31 13:45:19
Message-ID: 9846A6064BD102419D06814DD0D78DE149DD0176 () CIO-KRC-D2MBX08 ! osuad ! osu ! edu
[Download RAW message or body]

> Is there a predefined way to terminate the IdP flow on database errors
> (and showing an error message to the user)? Or do I have to insert e.g.
> a context-check interceptor myself?

My recollection is that the code logs and ignores them because it shouldn't matter if \
it's rare. It doesn't just send nothing, it sends whatever the user did or didn't \
agree to, it's just unable to either pre-load the decision from earlier or store the \
new decision, which only affects future requests.

That's at least as far as consent goes. If the artifact store fails, that might a \
different question, but I would think it would be fatal rather than sending nothing.

So I don't know why it would ever be doing that in either case, seems buggy.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net


[prev in list] [next in list] [prev in thread] [next in thread]