[Fwd: Re: Missing parameters on return URL]

[Umut Arus]

Hello,

Sorry for late reply,

target adress:
https://xyz.sabanciuniv.edu/cgi/users/home?screen=Items&show_inbox=1&show_buffer=0&show_archive=0&show_deletion=0


auth address:
https://auth.sabanciuniv.edu/cas/auth?service=https://xyz.sabanciuniv.edu/cgi/users/home?screen=Items&show_inbox=1&show_buffer=0&show_archive=0&show_deletion=0

*form tag:*
	<form method="post" action="auth;jsessionid=0D94E6764F68DF5EF78317BFABD34528?service=https://xyz.sabanciuniv.edu/cgi/users/home?screen=Items&show_inbox=1&show_buffer=0&show_archive=0&show_deletion=0">

*address changes after auth, without full parameters (late parameters removes)*
https://xyz.sabanciuniv.edu/cgi/users/home?screen=Items




Note if nessesary, while we had had url encode by modify code, encountered another problem

with url_encode
target adress:
https://xyz.sabanciuniv.edu/cgi/users/home?screen=Items&show_inbox=1&show_buffer=0&show_archive=0&show_deletion=0


 auth
 address:
https://auth.sabanciuniv.edu/cas/auth?service=https%3A%2F%2Fxyz%2Esabanciuniv%2Eedu%2Fcgi%2Fusers%2Fhome%3Fscreen%3DItems%26show%5Finbox%3D1%26show%5Fbuffer%3D0%26show%5Farchive%3D0%26show%5Fdeletion%3D0

*form tag:*
<form method="post" action="auth;jsessionid=FC0A53AECEF4711377CE17300BA9551D?service=https%3A%2F%2Fxyz%2Esabanciuniv%2Eedu%2Fcgi%2Fusers%2Fhome%3Fscreen%3DItems%26show%5Finbox%3D1%26show%5Fbuffer%3D0%26show%5Farchive%3D0%26show%5Fdeletion%3D0">

*address after auth:
*https://auth.sabanciuniv.edu/cas/auth


Regards,



> From scott.battaglia at gmail.com  Thu Nov 15 10:07:11 2007
> From: scott.battaglia at gmail.com (Scott Battaglia)
> Date: Thu, 15 Nov 2007 10:07:11 -0500
> Subject: [Fwd: Re: Missing parameters on return URL]
>
> How is your CAS auth page set up?  What is the FORM tag's action?  Does it
> include the service parameter?
>
> -Scott
>
> On Nov 15, 2007 4:25 AM, Umut Arus <umuta at sabanciuniv.edu> wrote:
> Hi,
>
> We have had urlencode 'service' attribute by using "/$service =~ 
> s/([^A-Za-z0-9])/sprintf("%%%02X", ord($1))/seg;/ " code.
> But the problem have changed after this modification on 
> Apache2::AuthCAS.pm. So,
>
> Step-1 After redirecting to CAS, encodes parameter,
> https://auth.domain.edu/cas/auth?service=https%3A%2F%2Fxyz%2Esabanciuniv%2Eedu%2Fcgi%2Fusers%2Fhome%3Fscreen%3DItems%26show%5Finbox%3D1%26show%5Fbuffer%3D0%26show%5Farchive%3D0%26show%5Fdeletion%3D0 
>
>
> Step-2 After CAS authentication, now only shows auth pages of CAS.
> https://auth.domain.edu/cas/auth
>
> Why does not it redirect to service url parameter?
>
> Regards,
>
>> -------- Original Message --------
>> Subject: 	Re: Missing parameters on return URL
>> Date: 	Tue, 6 Nov 2007 12:23:50 +0300
>> From: 	Marat Radchenko <slonopotamusorama at gmail.com>
>> Reply-To: 	Yale CAS mailing list <cas at tp.its.yale.edu>
>> To: 	Yale CAS mailing list <cas at tp.its.yale.edu>
>> References: 	<47302DD4.5030907 at sabanciuniv.edu>
>>
>>
>>
>> Step 2 URL is wrong. You must urlencode 'service' attribute value.
>>
>> 2007/11/6, Umut Arus <umuta at sabanciuniv.edu>:
>> >
>> >  Hi,
>> >
>> >  We are trying to use Apache2::AuthCAS on an application. URL including the
>> > query string sending to cas server however do not return second or another
>> > parameters. You can reproduce with similar URL string.
>> >
>> >  Is it a bug?
>> >
>> >
>> >  Connection Step 1:
>> > https://auth.domain.edu/cgi/users/home?eprintid=5083&screen=EPrint::View::Owner
>> >
>> >  Connection Step 2:
>> > https://auth.domain.edu/cas/auth?service=https://auth.domain.edu/cgi/users/home?eprintid=5083&screen=EPrint::View::Owner
>> >
>> >  Connection Step 3:
>> >  https://auth.domain.edu/cgi/users/home?eprintid=5083
>> >
>> >  apache access_log
>> >  10.10.1.147 - - [08/Oct/2007:10:57:30 +0300] "GET
>> > /cgi/users/home?eprintid=5083&screen=EPrint::View::Owner
>> > HTTP/1.1" 302 328
>> >  10.10.1.147 - - [08/Oct/2007:10:57:39 +0300] "GET
>> > /cgi/users/home?eprintid=5083&ticket=ST-50481-MY6aJW3kaleQfEbul9YIxAJ5cUi0BRV0TDW-20
>> > HTTP/1.1" 302 245
>> >  10.10.1.147 - - [08/Oct/2007:10:57:39 +0300] "GET
>> > /cgi/users/home?eprintid=5083 HTTP/1.1" 200 11063
>> >
>> >  Regards,

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20071227/6cf12d25/attachment.html