pretend to support external browser SAML

Actually this might be easier than the internal one

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

diff --git a/auth.c b/auth.c
index ad07b2a55e89e879ba806ade81656fc00b99c662..5a88145b21ed4a2a3ac980337eb3f870c5e533f3 100644 (file)
--- a/auth.c
+++ b/auth.c
@@ -809,6 +809,10 @@ static xmlDocPtr xmlpost_new_query(struct openconnect_info *vpninfo, const char
        if (!node)
                goto bad;
 
+       node = xmlNewTextChild(capabilities, NULL, XCAST("auth-method"), XCAST("single-sign-on-external-browser"));
+       if (!node)
+               goto bad;
+
        *rootp = root;
        return doc;