TicketValidationFilter question [resolved]

Scott Battaglia scott.battaglia at gmail.com
Thu Sep 20 10:12:15 EDT 2007


I just sent you an email about that. :-)  I didn't realize it wasn't clearly
documented.

Thanks for updating the wiki.  In the upcoming 3.1 release I'll be sure to
document that better.

Thanks
-Scott

On 9/20/07, Andrew R Feller <afelle1 at lsu.edu> wrote:
>
>  I apologize as I should have dug a bit deeper into the code to realize
> this.  Apparently, there are two constructors for the TicketValidationFilter
> bean.  The second constructor allows the specification of whether the client
> should redirect the user to the service requests without the ticket after
> validation.  As I was using the default configuration of the JA-SIG CAS
> client, I didn't realize this until after the fact.
>
>
>
> I will see about making an entry in the CAS wiki documenting this feature.
>
>
>
> Thank you anyhow,
>
>
>
> Andrew R Feller, Analyst
>
> Subversion Administrator
>
> University Information Systems
>
> Louisiana State University
>
> afelle1 at lsu.edu
>
> (office) 225.578.3737
>   ------------------------------
>
> *From:* cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu] *On
> Behalf Of *Andrew R Feller
> *Sent:* Thursday, September 20, 2007 8:01 AM
> *To:* Yale CAS mailing list
> *Subject:* TicketValidationFilter question
>
>
>
> In the current JA-SIG CAS Client for Java, whenever a user refreshes the
> service they are redirected to after CAS authentication, an exception is
> thrown because the TicketValidationFilter is attempting to re-validate the
> service ticket it previously consumed.
>
>
>
> Questions:
>
>
>
>    1. If the user is logged in, shouldn't the client ignore the ticket
>    on the request query and simply pass them through?
>    2. Is there any reason why the TicketValidationFilter always
>    attempts to validate a service ticket regardless of the CAS assertion in the
>    session?
>    3. How are users supposed to refresh or bookmark pages?
>    4. If there is a need for the filter to always re-validate the
>    service ticket, could there be some setting to by pass the check?
>
>
>
> Thanks,
>
>
>
> Andrew R Feller, Analyst
>
> Subversion Administrator
>
> University Information Systems
>
> Louisiana State University
>
> afelle1 at lsu.edu
>
> (office) 225.578.3737
>
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>


-- 
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070920/57dfa5da/attachment.html 


More information about the cas mailing list