You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Signing algorithm ignored for POST binding (sigalg vs sign_alg mismatch) #433
In LoginView.get, in POST binding mode, it looks like the signing algorithm (sigalg) is silently ignored because it's passed with the wrong parameter name to create_authn_request (source). The function call doesn't fail as create_authn_request ignores unknown parameters.
Activity
JPDSousa commentedon Jun 8, 2026
I've opened #432 with a proposed fix (i.e., rename + test)
JPDSousa commentedon Jun 24, 2026
@peppelinux 👋 What are the next steps here?