[cas-dev] Remember Me login

[Alan D. Cabrera]

We also wish to support "remember me".  What we plan on doing is  
hacking the CASFilter so that we store an encrypted token in a  
cookie.  Its format will be:

userid:expiration:salt

If the CASFilter sees this cookie, it will refresh the session  
variables.

We also intend to modify the CAS login code to include cas.remember  
URL parameter which would instruct the filter to construct the token.


Regards,
Alan

On Nov 9, 2006, at 7:04 AM, Peter Havelaar wrote:

> Hi I am using cas server 3.0.5 at the moment.
> I want to be able to give my users the ability to select a checkbox  
> at login
> whether or not they want their login to be remembered.
>
> I have tried looking on the wiki and in the documentation, but all  
> I can find
> on the wiki is:
>
> Out of the box parameters
> In /WEB-INF/cas.properties, you can adjust ticket expiration policy.
> Specifically, to change the ticket granting ticket timeout, you  
> would adjust
> policy.expiration.granting.timeOut=7200000 , which specifies ticket  
> granting
> ticket expiration in milliseconds. Its default value is two hours.
>
> Implementing "remember me"
> TODO
>
>
> Can you suggest to me how to implement a rememberme service that  
> can be chosen
> by the user when logging in.
> Pointers to the appropriate classes and xml files are appreciated,  
> even if it
> requires some programming.

Alan D. Cabrera
VP Engineering
Simula Labs - The Open Source Venture Partners
p: +1 510 225 5588 f: +1 800 822 0471
alan at simulalabs.com
www.simulalabs.com


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas-dev/attachments/20061109/7950498f/attachment.html