From e0276c65364bcb8a4a3fe1ad1c91899b1325836c Mon Sep 17 00:00:00 2001 From: Jamie Lennox Date: Wed, 26 Aug 2015 12:25:31 +1000 Subject: [PATCH] Fix Accept header in SAML2 requests The ; separator allows providing parameters to a type not separating type options. This means that in strict type checks like those performed by mod_auth_mellon the check for accept type fails. Change-Id: Ieeaa74b304921daef68497fec77cc6629ab2f0a2 Closes-Bug: #1488722 --- keystoneclient/contrib/auth/v3/saml2.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/keystoneclient/contrib/auth/v3/saml2.py b/keystoneclient/contrib/auth/v3/saml2.py index fc85f49fd..929d99ee6 100644 --- a/keystoneclient/contrib/auth/v3/saml2.py +++ b/keystoneclient/contrib/auth/v3/saml2.py @@ -126,7 +126,7 @@ class Saml2UnscopedToken(_BaseSAMLPlugin): SAML2_HEADER_INDEX = 0 ECP_SP_EMPTY_REQUEST_HEADERS = { - 'Accept': 'text/html; application/vnd.paos+xml', + 'Accept': 'text/html, application/vnd.paos+xml', 'PAOS': ('ver="urn:liberty:paos:2003-08";"urn:oasis:names:tc:' 'SAML:2.0:profiles:SSO:ecp"') }