Course catalog

Course catalog: Autenticazione OIDC

Preprod login:

   https://unimore-admin.pp.coursecatalogue.cineca.it/login    

Shibboleth IdP4 CORS handling:

   https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/2958163969/CORS+handling

purtroppo non funziona per lo endpoint userinfo (ma per token funziona).

Apache2 virtual host CORS handling:

    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} OPTIONS
    RewriteRule ^(.*)$ $1 [R=204,L]
    #Header always set Access-Control-Allow-Origin "https://unimore-admin.pp.coursecatalogue.cineca.it,https://unimore-admin.coursecatalogue.cineca.it" # non si può perché ci vuole una origine sola
    Header always set Access-Control-Allow-Origin "*"
    Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS"
    Header always set Access-Control-Allow-Headers "x-requested-with, Content-Type, origin, authorization, accept, client-security-token"
    Header always set Access-Control-Expose-Headers "Content-Security-Policy, Location"
    Header always set Access-Control-Max-Age "600"