急：SAML认证请求，回调域名带‘-’无法完成认证的问题。

答疑解惑
#1

问题描述

我在构建认证请求时，断言的回调地址assertionConsumerServiceUrl，如果域名带‘-’（比如https://auth-b.abc.com）,认证会报“未知错误”。 这个是bug？还是我需要对回调地址做一些特殊编码处理？

#2

可以把报错信息贴一下，特别是 requestId 和 errorId

#3

message: 未知错误

error_id: 04719d47-b3dc-4194-8041-93820a1d8fc0

request_id: f8ba3550-4156-4d61-b47c-8e1a52e1f3d8

#4

现在发现域名：https://pdemo.dsphere.com.cn 报如下错误
error_id: cc24ec37-8840-4b20-aada-5a4e628ce123
status_code: 400
message: SAML Request 格式无效：Cannot read property ‘attributes’ of null
request_id: 8a14008c-f2bd-4e6b-8c48-e310b50e4be0

但如果回调域名改为：https://pdemo.dsphere.com.cn:1112。则能成功

#5

发起 SAML 请求时的 SAMLRequest 也发一份哈， 我们排查是解析出来有乱码

#6

以下域名：https://pdemo.dsphere.com.cn
https://ovehj9vny27v.authing.cn/api/v2/saml-idp/66c3fb9318e9ea7e37da2dc5?SAMLRequest=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&RelayState=123

以下域名：https://p-demo.dsphere.com.cn
https://ovehj9vny27v.authing.cn/api/v2/saml-idp/66c3fb9318e9ea7e37da2dc5?SAMLRequest=PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48c2FtbDJwOkF1dGhuUmVxdWVzdCB4bWxuczpzYW1sMnA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgQXNzZXJ0aW9uQ29uc3VtZXJTZXJ2aWNlVVJMPSJodHRwczovL3AtZGVtby5kc3BoZXJlLmNvbS5jbi9hdXRoL2FwaS92MS9hdXRoL3Nzby9zYW1sL2xvZ2luIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9vdmVoajl2bnkyN3YuYXV0aGluZy5jbi9hcGkvdjIvc2FtbC1pZHAvNjZjM2ZiOTMxOGU5ZWE3ZTM3ZGEyZGM1IiBGb3JjZUF1dGhuPSJmYWxzZSIgSUQ9ImM2MGIwYWI4MDdmOTQwMTViZDFhNzc0YWNjYmEwYjQxIiBJc1Bhc3NpdmU9ImZhbHNlIiBJc3N1ZUluc3RhbnQ9IjIwMjQtMDktMTRUMDM6NTc6MDkuODk0WiIgUHJvdG9jb2xCaW5kaW5nPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YmluZGluZ3M6SFRUUC1QT1NUIiBWZXJzaW9uPSIyLjAiPjxzYW1sMjpJc3N1ZXIgeG1sbnM6c2FtbDI9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iPmh0dHBzOi8vcC1kZW1vLmRzcGhlcmUuY29tLmNuPC9zYW1sMjpJc3N1ZXI+PHNhbWwycDpOYW1lSURQb2xpY3kgQWxsb3dDcmVhdGU9InRydWUiIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIi8+PC9zYW1sMnA6QXV0aG5SZXF1ZXN0Pg==&RelayState=123

#7

跳转的时候 SAMLRequst 的值需要 URL 编码一下，base64 的 + 被转换成空格了

#8

我的错，万分感谢