SSL Verification about auth0-login HOT 4 CLOSED

which browser are you using?

from auth0-login.

This seems to only occur in safari, as far as I know. I was able to solve by serving https, by making the following changes locally. Not sure if there is an easier/better way of doing this.

/auth0-login-master/auth0_login/saml/command.py
change line 17:
from:
from http.server import HTTPServer
to:
from http.server import HTTPServer, BaseHTTPRequestHandler
import ssl

change line 49:
from:
@Property
def callback_url(self):
return f'http://localhost:{setting.LISTEN_PORT}/saml'
to:
@Property
def callback_url(self):
return f'https://localhost:{setting.LISTEN_PORT}/saml'

change line 62:
from:
def accept_saml_response(self):
SAMLAccessTokenCallbackHandler.callback_url = self.callback_url
SAMLAccessTokenCallbackHandler.handler = (lambda r: self.set_saml_response(r))
httpd = HTTPServer(('0.0.0.0', self.listen_port), SAMLAccessTokenCallbackHandler)
httpd.handle_request()
httpd.server_close()

to:
def accept_saml_response(self):
SAMLAccessTokenCallbackHandler.callback_url = self.callback_url
SAMLAccessTokenCallbackHandler.handler = (lambda r: self.set_saml_response(r))
httpd = HTTPServer(('0.0.0.0', self.listen_port), SAMLAccessTokenCallbackHandler)
httpd.socket = ssl.wrap_socket (httpd.socket,
keyfile="/Users/test/Desktop/auth0-login-master/key.pem",
certfile='/Users/test/Desktop/auth0-login-master/cert.pem', server_side=True)
httpd.handle_request()
httpd.server_close()

from auth0-login.

Well, it is pretty difficult. For https to work, we need a certificate for 'localhost'. However, this is always a self-signed certificate which needs to be added to the trusted CA store of the local machine and/or browser.

from auth0-login.

@mvanholsteijn sorry for the delay in following up on this, I had to switch gears to a different project for a while. Do you know of a way to return the saml response so that it is not in a form?

from auth0-login.