force post binding switch

forms/common-themes/src/main/resources/theme/admin/base/resources/js/controllers/applications.js

@@ -363,6 +363,7 @@ module.controller('ApplicationDetailCtrl', function($scope, realm, application,
     $scope.samlAssertionSignature = false;
     $scope.samlClientSignature = false;
     $scope.samlEncrypt = false;
+    $scope.samlForcePostBinding = false;
     if (!$scope.create) {
         if (!application.attributes) {
             application.attributes = {};
@@ -442,6 +443,13 @@ module.controller('ApplicationDetailCtrl', function($scope, realm, application,
             $scope.samlMultiValuedRoles = false;
         }
     }
+    if ($scope.application.attributes["saml.force.post.binding"]) {
+        if ($scope.application.attributes["saml.force.post.binding"] == "true") {
+            $scope.samlForcePostBinding = true;
+        } else {
+            $scope.samlForcePostBinding = false;
+        }
+    }
 
     $scope.switchChange = function() {
         $scope.changed = true;
@@ -534,6 +542,12 @@ module.controller('ApplicationDetailCtrl', function($scope, realm, application,
         } else {
             $scope.application.attributes["saml.multivalued.roles"] = "false";
 
+        }
+        if ($scope.samlForcePostBinding == true) {
+            $scope.application.attributes["saml.force.post.binding"] = "true";
+        } else {
+            $scope.application.attributes["saml.force.post.binding"] = "false";
+
         }
 
         $scope.application.protocol = $scope.protocol;

forms/common-themes/src/main/resources/theme/admin/base/resources/partials/application-detail.html

@@ -56,6 +56,13 @@
                     </div>
                     <span tooltip-placement="right" tooltip="'Confidential' applications require a secret to initiate login protocol.  'Public' clients do not require a secret.  'Bearer-only' applications are web services that never initiate a login." class="fa fa-info-circle"></span>
                 </div>
+                <div class="form-group clearfix block" data-ng-show="protocol == 'saml'">
+                    <label class="col-sm-2 control-label" for="samlServerSignature">Force POST Responses</label>
+                    <div class="col-sm-6">
+                        <input ng-model="samlAuthnStatement" ng-click="switchChange()" name="samlAuthnStatement" id="samlAuthnStatement" onoffswitch />
+                    </div>
+                    <span tooltip-placement="right" tooltip="Should a statement specifying the method and timestamp be included in login responses?" class="fa fa-info-circle"></span>
+                </div>
                 <div class="form-group clearfix block" data-ng-show="protocol == 'saml'">
                     <label class="col-sm-2 control-label" for="samlServerSignature">Include AuthnStatement</label>
                     <div class="col-sm-6">
@@ -111,6 +118,13 @@
                     </div>
                     <span tooltip-placement="right" tooltip="Will the client sign their saml requests and responses?  And should they be validated?" class="fa fa-info-circle"></span>
                 </div>
+                <div class="form-group clearfix block" data-ng-show="protocol == 'saml'">
+                    <label class="col-sm-2 control-label" for="samlForcePostBinding">Force POST Binding</label>
+                    <div class="col-sm-6">
+                        <input ng-model="samlForcePostBinding" ng-click="switchChange()" name="samlForcePostBinding" id="samlForcePostBinding" onoffswitch />
+                    </div>
+                    <span tooltip-placement="right" tooltip="Always use POST binding for responses." class="fa fa-info-circle"></span>
+                </div>
 
                 <div class="form-group" data-ng-show="!application.bearerOnly">
                     <label class="col-sm-2 control-label" for="newRedirectUri">Redirect URI <span class="required" data-ng-show="create">*</span></label>