[cas-dev] case sensitivity for RegisteredService matching

Scott Battaglia scott.battaglia at gmail.com
Wed Nov 28 14:23:52 EST 2007


>From your description it appears that the hostname and scheme MUST be
case-insensitive and the rest should be case-sensitive, but its not
required.

Because we're using Ant Pattern Matching to match URLs (and not
octet-by-octet comparison as we can't), I'd be fine to do the entire
comparison as case insensitive to meet the requirements for the hostname and
scheme.

Does that seem reasonable?
-Scott

On Nov 28, 2007 2:03 PM, Smith, Matt <matt.smith at uconn.edu> wrote:

> Just for consistency and compliance with other specs, I'd recommend
> following RFC 2616, section 3.2.3 [1].  This defines how HTTP URIs
> should be compared.  Here is the relevant part:
>
> ------------------------------------------------------------------------
> When comparing two URIs to decide if they match or not, a client SHOULD
> use a case-sensitive octet-by-octet comparison of the entire URIs, with
> these exceptions:
>
> - A port that is empty or not given is equivalent to the default
>        port for that URI-reference;
> - Comparisons of host names MUST be case-insensitive;
> - Comparisons of scheme names MUST be case-insensitive;
> - An empty abs_path is equivalent to an abs_path of "/".
>
> Characters other than those in the "reserved" and "unsafe" sets (see RFC
> 2396 [42]) are equivalent to their ""%" HEX HEX" encoding.
>
> For example, the following three URIs are equivalent:
>
> http://abc.com:80/~smith/home.html <http://abc.com:80/%7Esmith/home.html>
>      http://ABC.com/%7Esmith/home.html
>      http://ABC.com:/%7esmith/home.html
> ------------------------------------------------------------------------
>
> Essentially, the host and scheme should be compared case-insensitive,
> but the path should be case-sensitive.
>
> HTH,
> -Matt
>
> [1] http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html#sec3.2.3
>
>
>
> On Wed, 2007-11-28 at 12:54 -0500, Scott Battaglia wrote:
> > Right now name matching for RegisteredServices is case-sensitive.
> >
> > Anyone have any objections to make it case-insensitive as per JIRA
> > issue: http://www.ja-sig.org/issues/browse/CAS-600
> >
> > -Scott
> > _______________________________________________
> > cas-dev mailing list
> > cas-dev at tp.its.yale.edu
> > http://tp.its.yale.edu/mailman/listinfo/cas-dev
> --
> Matt Smith
> matt.smith at uconn.edu
> University Information Technology Services (UITS)
> University of Connecticut
> PGP Key ID: 0xE9C5244E
>
> _______________________________________________
> cas-dev mailing list
> cas-dev at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas-dev
>
>


-- 
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas-dev/attachments/20071128/3156ba44/attachment.html 


More information about the cas-dev mailing list