身份验证成功后传递 Shibboleth 凭据
我有一个关于 Shibboleth 的高级/概念性问题。
我正在开发数据驱动的 Web 应用程序的前端（运行 Drupal）。最终用户与前端交互以构建数据查询，前端向缓存/归档数据代理（“数据检索服务”）发出后台请求，后者要么从缓存中传递数据，要么发出更多查询具有所需数据的服务（“那里”）。到目前为止一切都很好......它很华丽，但仅与我们试图解决的问题一样华丽。
问题是：数据检索服务查询的某些服务想要实现用户级身份验证，以便某些用户可以访问他们的数据，但其他用户则不能。出于组织原因，我们的身份和认证机制很可能是 Shibboleth。
所以，这是我的场景：用户使用 Shibboleth 登录前端。现在，我的前端以及数据检索服务可以作为用户针对外部服务进行身份验证吗？如果是这样，那么它在实践中是如何工作的（哪些身份验证数据从服务器传递到服务器）？
I have a high-level/conceptual question about Shibboleth.
I'm working on the front-end (running Drupal) of a data-driven web app. End-users interact with the front-end to construct data queries, which makes background requests to a caching/archiving data proxy (the "data retrieval service"), which in turn either delivers data from its cache or goes out and queries still more services ("out there") which have desired data. So far so good... it is ornate, but only as ornate as the problem we're trying to solve.
Here's the wrinkle: Some of services queried by the data retrieval service want to implement user-level authentication, so that some users may access their data, but others cannot. For organizational reasons, our identity and authentication mechanism is likely to be Shibboleth.
So, here's my scenario: a user logs in to the frontend using Shibboleth. Now, can my frontend, and in turn, the data retrieval service, authenticate against against external services as the user? And if so, how does that work in practice (what authentication data gets passed from server to server)?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
是的，可以 - 您的服务必须存在于身份提供商中（如何设置取决于您）
Yes it can - you service has to exist in the identity provider (how it is set up is up to you)