How to obtain a service ticket?

[Scott Battaglia]

You can do a GET/POST and parse the response.  You would need to do the
following:

1. Do a GET call to /cas/login
2. Parse the return page for the "lt" value
3. Do a POST call to /cas/login with the username, password, service and lt
(you may also need the other parameters which are listed in the
casLoginView.jsp)
4. Your HTTP response will be a redirect.  You will need to retrieve the
service ticket from the redirect url.

Hope that helps.
-Scott

On 3/13/07, t ray <t_ray9505 at yahoo.com> wrote:
>
> Thanks for the response.
> What I didn't get from your response is this- Is doing the GET/POST and
> parsing the response a possible solution? My own knowledge about Spring etc
> is limited. So, figuring out how to create a Controller and wire it into the
> framework may turn out to be harder than doing a GET/POST and parsing the
> response. So, if it is possible to do a GET/POST and parse the response, I
> would like some pointers on how to do that.
>
> Thanks.
>
> ----- Original Message ----
> From: Scott Battaglia <scott.battaglia at gmail.com>
> To: Yale CAS mailing list <cas at tp.its.yale.edu>
> Sent: Monday, March 12, 2007 8:19:22 PM
> Subject: Re: How to obtain a service ticket?
>
> If you want to do something like that I recommend creating a different
> endpoint Controller that takes your parameters constructs the credentials
> and passes them to an instance of CentralAuthenticationService which would
> allow you to obtain a service ticket which you can return as the body of
> your response.  This gets around the whole parsing the GET and doing a POST
> to the normal workflow.
>
> -Scott
>
> On 3/12/07, t ray <t_ray9505 at yahoo.com> wrote:
> >
> >  I need to be able to authenticate a username/password combo received
> > from a legacy NON-webapp. From reading some of the old forum messages( http://tp.its.yale.edu/pipermail/cas/2004-July/000617.html)
> > <http://tp.its.yale.edu/pipermail/cas/2004-July/000617.html%29>, it
> > seems I can do a get/post to the CAS login servlet and parse the response
> > for a service ticket (not particularly appealing). Another method appears to
> > be to use the ServiceTicketValidator class and call validate() with a
> > service ticket. However, I am not sure how to get a service ticket in the
> > first place (an unused service ticket is what I need). The documentation for
> > CASFilter and CASValidateFilter indicate that these classes can be used to
> > do validation but I am not sure how (there don't seem to be any validate()
> > kind of methods on either of these 2 classes).
> >
> > Can someone please clarify? If I am going to use the get/post method,
> > what is the name of the params to pass (Is ?username=xyz&password=abc ok?)
> >
> > Thanks for your help.
> >
> >
> > ------------------------------
> > Never miss an email again!
> > Yahoo! Toolbar
> > <http://us.rd.yahoo.com/evt=49938/*http://tools.search.yahoo.com/toolbar/features/mail/>alerts
> > you the instant new Mail arrives. Check it out.
> >
> > _______________________________________________
> > Yale CAS mailing list
> > cas at tp.its.yale.edu
> > http://tp.its.yale.edu/mailman/listinfo/cas
> >
> >
>
>
> --
> -Scott Battaglia
>
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
> ------------------------------
> It's here! Your new message!
> Get new email alerts<http://us.rd.yahoo.com/evt=49938/*http://tools.search.yahoo.com/toolbar/features/mail/>with the free Yahoo!
> Toolbar.
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>


-- 
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070313/337b3beb/attachment.html