ipsilon

#515 Recovered: REST API allows SPs to be added with illegal names
Closed: Fixed by t0xic0der. Opened by t0xic0der.

Closed: Fixed
Reopen Issue

The admin pages only allow a SP to be added with a name containing alphanumeric characters. The REST API doesn't have this restriction. This lets you add a SP with an invalid name (like sp.example.test), which will actually work for issuing SAML assertions, but breaks the admin pages. If you attempt to open or delete a SP that has an illegal name in the admin pages, you will get a 404. This effectively means that it is impossible to delete an illegally named SP through any of the supported interfaces.

This issue ticket was originally removed from the tracker as it clashed with the pull request.
See upstream ticket for migration details.

Metadata Update from @t0xic0der:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.