Using django-shibboleth-remoteuser with LoginRequiredMixin from Django Braces about django-shibboleth-remoteuser HOT 5 OPEN

Normally what we do with this package is to have the whole site protected by Shib, even if a valid session isn't required for every page. So, for example, we would have something like this:

<Location /pennkey>
    AuthType shibboleth
    Require valid-user
    ShibRequireSession on
  </Location>

  <Location /Shibboleth.sso>
    SetHandler shib
  </Location>

<Location />
    AuthType shibboleth
    ShibRequireSession off
    Require Shibboleth
  </Location>

Does that fix the issue for you? If it does, would you still need a different solution, or are you OK with that?

from django-shibboleth-remoteuser.

Just FYI, I haven't forgotten this. This got us part of the way there, but we're working on a solution which may help others. We're working on protecting a single Django URL route with Shib, then allowing Django's login_required() to handle the rest. We're also including an example where anything with login_required() is protected by Shib, but a single URL route/view uses Django's auth instead.

I'll post it here when we get it, and issue a PR for the README, in case it might help. Thanks for all your efforts!

from django-shibboleth-remoteuser.

Great!

from django-shibboleth-remoteuser.

Please try the latest code with PR #43, and see if that helps this issue.

from django-shibboleth-remoteuser.

@FlipperPA and @bcail is this still an active issue?

from django-shibboleth-remoteuser.