In LoginView.get, in POST binding mode, it looks like the signing algorithm (sigalg) is silently ignored because it's passed with the wrong parameter name to create_authn_request (source). The function call doesn't fail as create_authn_request ignores unknown parameters.
In
LoginView.get, in POST binding mode, it looks like the signing algorithm (sigalg) is silently ignored because it's passed with the wrong parameter name tocreate_authn_request(source). The function call doesn't fail ascreate_authn_requestignores unknown parameters.