Narrow the matching of the saml metadata route

[matrss]

MSS/mslib/mscolab/server.py

Line 857 in f6b3ad1

@APP.route("/metadata/<idp_identity_name>", methods=['GET'])

This route could also be defined in a loop for each IdP (similar to the acs_post_handler), so that it does not match too broadly. That would remove the requirement for an explicit 404 (and the need for the entire 404 template).

Originally posted by @matrss in #2069 (comment)

[matrss]

Even better, use the (very sparsely documented) any route converter. That way, the function can stay as is and only the route matching string has to be modified.

References:

• https://flask.palletsprojects.com/en/3.0.x/api/#url-route-registrations
• https://werkzeug.palletsprojects.com/en/3.0.x/routing/#werkzeug.routing.AnyConverter
• https://stackoverflow.com/questions/43012860/pass-in-a-list-of-possible-routes-to-flask