Skip to content

Read relayState from authenticationRequest - #19629

Open
cfcromn wants to merge 1 commit into
spring-projects:mainfrom
cfcromn:fix/19627-saml2-cache-request
Open

Read relayState from authenticationRequest#19629
cfcromn wants to merge 1 commit into
spring-projects:mainfrom
cfcromn:fix/19627-saml2-cache-request

Conversation

@cfcromn

@cfcromn cfcromn commented Aug 29, 2026

Copy link
Copy Markdown

Summary

Closes #19627

Restores the behavior previously introduced for #18243 in CacheSaml2AuthenticationRequestRepository.

saveAuthenticationRequest now reads the relay state from the AbstractSaml2AuthenticationRequest instead of the HttpServletRequest. This allows the authentication request to be cached when the relay state is not present as a parameter on the current HTTP request.

A regression test has been added to cover this scenario.

Test plan

  • CacheSaml2AuthenticationRequestRepositoryTests
  • spring-security-saml2-service-provider test suite
  • opensaml5Test
  • bouncyCastleTest
  • checkstyleMain
  • checkstyleTest

Signed-off-by: 박하민 <hamin090403@gmail.com>
@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Aug 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

status: waiting-for-triage An issue we've not yet triaged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix for #18243 (CacheSaml2AuthenticationRequestRepository.saveAuthenticationRequest(..) throws IllegalArgumentException) is missing in 7.1.1

2 participants