PasswordReplayFilter sends invalid requests.

[takano.sha]

I am using PasswordReplayFilter with OpenIG4.0 .

Automatic login succeeded with PasswordReplayFilter,
The behavior after login is incorrect and in trouble.

I captured the packet after login with tcpdump.
OpenIG was sending extra requests (two more times) to the service provider as follows:

——————–
Browser->OpenAM agent/OpenIG

OpenAM agent->(Request)->OpenAM (several times)
OpenAM agent<-(Response)<-OpenAM …All Code 200

OpenIG->(Request)->ServiceProvider …POST with Body Content
OpenIG<-(Response)<-ServiceProvider …Code 200

*Unnecessary request*
OpenIG->(Request)->ServiceProvider …POST with no Body Content
OpenIG<-(Response)<-ServiceProvider …Code 415 Unsupported Media Type

*Unnecessary request*
OpenIG->(Request)->ServiceProvider …POST with no Body Content
OpenIG<-(Response)<-ServiceProvider …Code 415 Unsupported Media Type

Browser<-OpenAM agent/OpenIG …Code 415 Unsupported Media Type
——————–

Why are incorrect requests being sent?
Is there a solution?

[Author]

Posts