Forum Discussion
CirrusIRule for Setting http headers for Redirect
I have a service provider that needs to get information in http headers to make SSO work with them.
The http headers have to be submitted on behalf of the user by F5. Once the http headers are submitted the service provider
returns an html document that needs to be sent to the user. I'm trying to short cut a step by having the user submit the http headers.
Right now it seems I have three options:
-
Build a html form in an irule and sending back to the client - But I would need to use javascript to make this work because of the http headers need to be sent to the service provider
-
Do a sieband connection - Send the request to the service provider get the content and sent it back down to the client. This seems to require another virtual server in the mix. I just want to make sure there's not a simple way to do this solution first.
-
See if I can do a HTTP::respond 301 but I need the redirect to send http headers from the clients machine as well. I'm also using an access policy to authenticate the user then after the users has passed the access policy I implement the irule. when ACCESS_POLICY_COMPLETED { set policy_result [ACCESS::policy result]
switch $policy_result { "allow" { log local0. "Allow:" set clientid "[ACCESS::session data get session.custom.form.employeeID]" set clienttimestamp "[ACCESS::session data get session.custom.form.timestamp]" set clientemployeeid "[ACCESS::session data get session.custom.form.employeeID]"
Do sideband connection or redirect and pass headers and send results back down to user....
1 Reply
- Kevin_Stewart
Employee
Your first option is probably the best here. There's really nothing you can do on the server side to make a client pass specific headers, but you can likely use client side scripting to get it done. I would argue though that this isn't a short cut. It'd be far easier I imagine to simply embed the headers in the HTTP request as it passes through the proxy.
