InCommon Library Services

[Steven Carmody <>]

let's try a bit more info, since I'm now sitting at a real keyboard.  ;-)

could you embed a 1 X 1 GIF into each of these pages, and place the GIF 
file into a Shib-protected directory ?

That should take the browser user thru the normal sequence ?

-------- Original Message --------
Subject: Re: [inc-librsvcs] Invoking Shibboleth from Javascript
Date: Thu, 2 Jun 2011 18:27:37 -0400
From: Steven Carmody 
<>
To: Rich Wenger 
<>
CC: 

 
<>

Hmmmm ..... Embed a 1 X 1 gif ?

Sent from my iPhone

On Jun 2, 2011, at 4:55 PM, Rich Wenger 
<>
 wrote:

> https://delisle.mit.edu/secure/new.js triggers Shib exactly as you
> would expect.  It appears that JavaScript is not prepared to handle
> the '302 redirect' that it sees in response to the onclick event.
> It simply does not invoke the browser in the way an anchor does.
>
> -Rich
>
> -----Original Message-----
> From: 
>
>  [
> ]
>  On Behalf Of Steven Carmody
> Sent: Thursday, June 02, 2011 4:27 PM
> To: 
>
> Subject: Re: [inc-librsvcs] Invoking Shibboleth from Javascript
>
> On 5/31/11 3:21 PM, Rich Wenger wrote:
> > When I load https://delisle.mit.edu/geoweb/testload.html
> > <https://delisle.mit.edu/geoweb/testload.html> and click the Load
> > button, I see responses of this kind in the web console:
> > [14:49:28.381] GET https://delisle.mit.edu/secure/new.js [HTTP/1.1
> > 302
> > Found 31ms]
> > but Shibboleth does not intercept the load, and the loaded file
> > does not
> > execute. If I move new.js to some other directory and point to it, it
> > works fine.
> > Should this work, or does Shibboleth not support this for some
> > reason?
> > Does anybody have a suggestion for a better way to accomplish a
> > Shibboleth authentication cycle from within Javascript?
>
> should work... what happens if you point your browser directly at
>
> https://delisle.mit.edu/secure/new.js
>
> is that doesn't trigger Shib... then perhaps Shib hasn't been properly
> configured to protect that directory ?