Map multi-value SAML attributes into multi-value HTTP header

itzg · itzg · commit c9b5a49b6c52 · 2019-02-19T14:30:59.000-06:00
diff --git a/server/proxy.go b/server/proxy.go
@@ -69,7 +69,11 @@ func (p *proxy) handler(respOutWriter http.ResponseWriter, reqIn *http.Request)
 
 	if p.config.AttributeHeaderMappings != nil {
 		for attr, hdr := range p.config.AttributeHeaderMappings {
-			reqOut.Header.Set(hdr, authToken.Attributes.Get(attr))
+			if values, ok := authToken.Attributes[attr]; ok {
+				for _, value := range values {
+					reqOut.Header.Add(hdr, value)
+				}
+			}
 		}
 	}
 	if p.config.NameIdHeaderMapping != "" {

Original file line number	Diff line number	Diff line change
`@@ -69,7 +69,11 @@ func (p proxy) handler(respOutWriter http.ResponseWriter, reqIn http.Request)`
`69`	`69`
`70`	`70`	`if p.config.AttributeHeaderMappings != nil {`
`71`	`71`	`for attr, hdr := range p.config.AttributeHeaderMappings {`
`72`		`- reqOut.Header.Set(hdr, authToken.Attributes.Get(attr))`
	`72`	`+ if values, ok := authToken.Attributes[attr]; ok {`
	`73`	`+ for _, value := range values {`
	`74`	`+ reqOut.Header.Add(hdr, value)`
	`75`	`+ }`
	`76`	`+ }`
`73`	`77`	`}`
`74`	`78`	`}`
`75`	`79`	`if p.config.NameIdHeaderMapping != "" {`