[cas-dev] JA-SIG CAS client 3.0M1
Velpi
velpi at industria.be
Fri Sep 22 11:05:00 EDT 2006
Hi
I've set up and tested the M1 version of the JA-SIG CAS client the past few
days. It seems to do its job correctly. However I did get to retrieving a proxy
ticket (however the proxy ticket validator seems to work).
Here are some more remarks and questions:
It would be more clean if Cas20ServiceTicketValidator had a constructor that
doesn't require a ProxyGrantingTicketStorage. Is that possible?
In the same context it might be better to split out the ST and PT validator into
a base abstract class. It's very confusing to see PT stuff in the ST class and
it doesn't feel that clean.
The assembly.xml does not include the examples yet. I think it would be nice to
include a small (demo) webapp directory with some test-jsp and a few simple
examples (simple ST, ST with remote_user filter and authZ, ST&PT). [a script
like http://shib.kuleuven.be/download/sp/test_scripts/shibenv.jsp.txt is really
useful to include]
It would also be nice if the assembly file xplit out the minimal dependencies
(jar files) that need to be included for using the filter in a webapp.
I suggest a few changes to the properties file to make it more clear:
--------------
cas.server.gateway=false
cas.server.renew=false
cas.server.url=https://cas.example.be/cas/
cas.server.loginUrl=${cas.server.url}login
cas.client.serverName=client.example.be
cas.client.proxyCallbackUrl=https://${cas.client.serverName}/proxy/Receptor
--------------
And then use these appropriately in the xml configuration.
The "constructor-arg" is unclear if you don't look at the source code. For
easier adoption I suggest to put comment with each "constructor-arg" to show
what it's about (and example values).
Is there a reason why the remote_user filter is called
"HttpServletRequestWrapperFilter" and not "CasHttpServletRequestWrapperFilter"?
How should I configure two filters to *eg* a different CAS server that are in
the same context (so the same configuration file...).
I added (more) logging to all the filters. Are you interested in my adjustments?
If yes: would you like diff files or the entire class files? [jira?]
kind regards,
-- Velpi
More information about the cas-dev
mailing list