From 9c6023c6b7c76f894fb25db5429740f480af87fb Mon Sep 17 00:00:00 2001
From: Paul Caskey <pcaskey@internet2.edu>
Date: Fri, 18 Dec 2020 09:44:53 -0600
Subject: [PATCH] fix for midpoint rest auth

---
 Workbench/webproxy/container_files/httpd/.htpasswd  | 1 +
 Workbench/webproxy/container_files/httpd/proxy.conf | 4 +++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/Workbench/webproxy/container_files/httpd/.htpasswd b/Workbench/webproxy/container_files/httpd/.htpasswd
index 5874795..f9046e3 100644
--- a/Workbench/webproxy/container_files/httpd/.htpasswd
+++ b/Workbench/webproxy/container_files/httpd/.htpasswd
@@ -1,2 +1,3 @@
 csp:$apr1$/AqZo5q1$D0h7ClOUpgCvUhayr6oOg0
 guest:$apr1$E6QtcEtu$/YXrr/F4OpNmTClXGBXpX/
+administrator:$apr1$yYQxN8bz$UlAb7q/m6jra60QKjhHPA/
diff --git a/Workbench/webproxy/container_files/httpd/proxy.conf b/Workbench/webproxy/container_files/httpd/proxy.conf
index 6c0eafa..bc68f51 100644
--- a/Workbench/webproxy/container_files/httpd/proxy.conf
+++ b/Workbench/webproxy/container_files/httpd/proxy.conf
@@ -12,7 +12,9 @@ AllowEncodedSlashes On
 </Location>
 
 <Location /midpoint>
-  RequestHeader unset Authorization
+  <If "%{THE_REQUEST} =~ m#\s/+midpoint/auth/shib/?[?\s]#">
+    RequestHeader unset Authorization
+  </If>
 </Location>
 
 <Location /idpui>