This thread is regarding CAS 4.2.x (and probably with CAS 5.0 but did not 
verify).

I noticed with the Ticket Registry Implementations that when a 
ProxyGrantingTicket is created with the 
org.jasig.cas.ticket.ServiceTicketImpl's "grantProxyGrantingTicket(String, 
Authentication, ExpirationPolicy)" that the PGT is added back into the 
TGT's Set of proxyGrantingTickets:


...

           getGrantingTicket().getProxyGrantingTickets().add(pgt);

...


For some reason with the Hazelcast and Ignite ticket registries 
(org.jasig.cas.ticket.registry.HazelcastTicketRegistry and 
org.jasig.cas.ticket.registry.IgniteTicketRegistry) that the Proxy Granting 
Tickets are not staying in the set of proxyGrantingTickets that is in 
org.jasig.cas.ticket.TicketGrantingTicketImpl when the Proxy Granting 
Ticket is generated.  This happens with the TGT is retrieved from the cache.


This does not happen with the EHCache, Infinispan, Memcached, 
and Distributed Ticket Registry implementations.


The reason this is an issue is that I am updating unit tests to push into 
the 4.2.5-SNAPSHOT build.


Test scenario:


1) Use either the org.jasig.cas.ticket.registry.IgniteTicketRegistryTests 
or org.jasig.cas.ticket.registry.HazelcastTicketRegistryTests.

2) Look at the verifyDeleteTicketWithPGT as a sample.

3) Create a TGT that never expires and add it to the registry.

4) Create a Service Ticket of the TGT that never expiries and it to the 
registry.

5) Create a PGT by calling the Service Ticket's grantProxyGrantingTicket

6) Delete the TGT.

7) Verify the Service Ticket is deleted (this passed in my case).

8) Verify the PGT is deleted (this fails in my case for Hazelcast and 
Ignite ticket registries)

 

-- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/9388f179-9c0c-4459-b805-2b4c80f70d4b%40apereo.org.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

Reply via email to