[cas-dev] Using CAS without the CAS login screen

[Jennifer Yang]

Hello,

I am trying something that is advised by CAS not to.  :-)  I am
investigating the ability to establish SSO in the background without user
getting redirected to the login screen.

I was following this:
http://www.ja-sig.org/wiki/display/CAS/Using+CAS+without+the+CAS+login+screen

I was able to login and validate the service ticket, simply using
URLConnection.

However, when I try the second part ("Again, get a login ticket. Then,
generate Redirect to the browser placing the login ticket, the username, and
the password on the CAS login URL to which you're redirecting."), I get an
error when the request is redirected.

2006-10-02 15:26:21,420 DEBUG [
org.springframework.webflow.execution.FlowExecutionManager] - Returning
selected view to client: [ViewDescriptor at 1cd846c viewName = 'casLoginView',
redirect = false, model = map['flowExecutionId' ->
'75D56C4B-663C-1D55-F89F-179D71946ACB', 'currentStateId' -> 'viewLoginForm',
'flowExecutionContext' -> [FlowExecutionImpl at 1b0dec3 key =
'1A7E518C-AE22-32A3-9C6F-9A96DEB4265B', activeFlow = 'loginFlow',
currentState = 'viewLoginForm', rootFlow = 'loginFlow',
executingFlowSessions = list[[FlowSessionImpl at 1121b88 flow = 'loginFlow',
currentState = 'viewLoginForm', attributesCount = 0, attributes =
map[[empty]]]]]]]
2006-10-02 15:27:00,225 DEBUG [
org.springframework.webflow.execution.FlowExecutionManager] - New request
received from client, source event is: [ServletEvent at 16b4be5 source =
org.apache.catalina.connector.RequestFacade at 12c08c7, id = 'submit', stateId
= 'viewLoginForm', parameters = map['password' -> 'test', 'service' -> '
http://www.google.com', 'lt' -> '75D56C4B-663C-1D55-F89F-179D71946ACB',
'username' -> 'test', '_currentStateId' -> 'viewLoginForm', 'viewLoginForm'
-> 'submit', '_eventId' -> 'submit']]
2006-10-02 15:27:00,226 WARN [
org.springframework.web.servlet.DispatcherServlet] - Handler execution
resulted in exception - forwarding to resolved error view
org.springframework.webflow.execution.NoSuchFlowExecutionException: No
executing flow could be found with id '75D56C4B-663C-1D55-F89F-179D71946ACB'
-- perhaps the flow has ended or expired? This could happen if your users
are relying on browser history (typically via the back button) that
reference ended flows.; nested exception is java.lang.IllegalStateException:
No session attribute '
org.springframework.webflow.execution.FlowExecution.75D56C4B-663C-1D55-F89F-179D71946ACB'
found
java.lang.IllegalStateException: No session attribute '
org.springframework.webflow.execution.FlowExecution.75D56C4B-663C-1D55-F89F-179D71946ACB'
found
        at org.springframework.web.util.WebUtils.getRequiredSessionAttribute
(WebUtils.java:205)
        at
org.springframework.webflow.execution.servlet.HttpSessionFlowExecutionStorage.load
(HttpSessionFlowExecutionStorage.java:67)
        at
org.springframework.webflow.execution.FlowExecutionManager.onEvent(
FlowExecutionManager.java:424)
        at
org.springframework.webflow.execution.FlowExecutionManager.onEvent(
FlowExecutionManager.java:389)
        at
org.springframework.webflow.execution.servlet.ServletFlowExecutionManager.handle
(ServletFlowExecutionManager.java:77)

I think it's due to the session cookie not getting set correctly, but I
don't know how to fix it.

Cookie mycookie = new Cookie("JSESSIONID", cookie);
mycookie.setDomain(<my CAS server hostname>);
response.addCookie(mycookie);

Could you help?

Thanks,
Jennifer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas-dev/attachments/20061002/7b97a73d/attachment.html