Is it possible to return SSO cookie using ticket generatedusingRestful Api?

Keith Garry Boyce garry at consultsure.com
Mon Jan 12 13:06:42 EST 2009


Hopefully someone can answer this..

-----Original Message-----
From: Keith Garry Boyce <garry at consultsure.com>
Sent: Saturday, January 10, 2009 9:50 AM
To: 'Yale CAS mailing list' <cas at tp.its.yale.edu>
Subject: RE: Is it possible to return SSO cookie using ticket generatedusingRestful Api?

Also would this feature be something you would consider for addition to standard codebase?
From: cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu] On Behalf Of Keith Garry Boyce
Sent: Friday, January 09, 2009 12:57 PM
To: 'Yale CAS mailing list'
Subject: RE: Is it possible to return SSO cookie using ticket generatedusingRestful Api?

What CAS implementation classes would I have to change to allow this? Basically I suppose it would be a url like /cas/issueCookie?ticket=xyz
 
Also what would be the security risks involved in allowing this to be possible?
From: cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu] On Behalf Of Scott Battaglia
Sent: Friday, January 09, 2009 1

[The entire original message is not included]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20090112/4004cc73/attachment.html 


More information about the cas mailing list