TicketValidationFilter question [resolved]
Scott Battaglia
scott.battaglia at gmail.com
Thu Sep 20 10:12:15 EDT 2007
I just sent you an email about that. :-) I didn't realize it wasn't clearly
documented.
Thanks for updating the wiki. In the upcoming 3.1 release I'll be sure to
document that better.
Thanks
-Scott
On 9/20/07, Andrew R Feller <afelle1 at lsu.edu> wrote:
>
> I apologize as I should have dug a bit deeper into the code to realize
> this. Apparently, there are two constructors for the TicketValidationFilter
> bean. The second constructor allows the specification of whether the client
> should redirect the user to the service requests without the ticket after
> validation. As I was using the default configuration of the JA-SIG CAS
> client, I didn't realize this until after the fact.
>
>
>
> I will see about making an entry in the CAS wiki documenting this feature.
>
>
>
> Thank you anyhow,
>
>
>
> Andrew R Feller, Analyst
>
> Subversion Administrator
>
> University Information Systems
>
> Louisiana State University
>
> afelle1 at lsu.edu
>
> (office) 225.578.3737
> ------------------------------
>
> *From:* cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu] *On
> Behalf Of *Andrew R Feller
> *Sent:* Thursday, September 20, 2007 8:01 AM
> *To:* Yale CAS mailing list
> *Subject:* TicketValidationFilter question
>
>
>
> In the current JA-SIG CAS Client for Java, whenever a user refreshes the
> service they are redirected to after CAS authentication, an exception is
> thrown because the TicketValidationFilter is attempting to re-validate the
> service ticket it previously consumed.
>
>
>
> Questions:
>
>
>
> 1. If the user is logged in, shouldn't the client ignore the ticket
> on the request query and simply pass them through?
> 2. Is there any reason why the TicketValidationFilter always
> attempts to validate a service ticket regardless of the CAS assertion in the
> session?
> 3. How are users supposed to refresh or bookmark pages?
> 4. If there is a need for the filter to always re-validate the
> service ticket, could there be some setting to by pass the check?
>
>
>
> Thanks,
>
>
>
> Andrew R Feller, Analyst
>
> Subversion Administrator
>
> University Information Systems
>
> Louisiana State University
>
> afelle1 at lsu.edu
>
> (office) 225.578.3737
>
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
--
-Scott Battaglia
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070920/57dfa5da/attachment.html
More information about the cas
mailing list