Hi Morgan, Setting *cas.ticket.st.numberOfUses* property a value bigger than 1 makes it possible to reuse the service ticket. If it is defined in the protocol that it can be used only once, then why is this property ?
Thank you. 5 Ocak 2017 Perşembe 20:21:17 UTC+3 tarihinde morgan yazdı: > > As defined by the CAS protocol, Service Tickets can only be validated > once. They cannot be reused. > > Andy > > On Thu, 5 Jan 2017, Gokhan Mansuroglu wrote: > > > I am asking how to prevent someone reusing a ST from a different client > IP. > > > > 5 Ocak 2017 Perşembe 19:50:03 UTC+3 tarihinde Ray Bon yazdı: > >> > >> Gokhan, > >> > >> Are you ask how to reuse a ST or are you asking how to prevent someone > >> reusing a ST? > >> > >> I will answer the second. ST lifetime is short (10 seconds by default, > I > >> think). Once a ST has been submitted to CAS for validation (step 4 > below) > >> or ticket lifetime has passed, CAS will mark the ST as expired and it > can > >> no longer be used. > >> > >> Ray > >> > >> On 2017-01-05 04:14, Gokhan Mansuroglu wrote: > >> > >> Hi, > >> > >> I have an additional requirement for Cas protocol. I will simplify the > >> protocol just to explain my case; > >> > >> 1. Client tries to access *https://app.example.com > >> <http://app.example.com>* > >> 2. Browser redirected to * > https://cas.example.com/cas/login?service=https://app.example.com > >> <https://cas.example.com/cas/login?service=https://app.example.com>* > >> 3. User authenticates with username and password and redirected to * > https://app.examle.com > >> <https://app.examle.com>?ticket=ST-xxx* > >> 4. The app send a validation request and gets the authentication > >> information. > >> > >> Lets say you want to be able to use the service ticket multiple times. > >> Then whoever has the link *https://app.examle.com?ticket=ST-xxx > >> <https://app.examle.com?ticket=ST-xxx>* can successfully log in the > >> application which results in very risky situation. > >> > >> What is your solution to this problem ? > >> > >> Thank you very much. > >> > >> -- > >> - CAS gitter chatroom: https://gitter.im/apereo/cas > >> - CAS mailing list guidelines: > >> https://apereo.github.io/cas/Mailing-Lists.html > >> - CAS documentation website: https://apereo.github.io/cas > >> - CAS project website: https://github.com/apereo/cas > >> --- > >> You received this message because you are subscribed to the Google > Groups > >> "CAS Community" group. > >> To unsubscribe from this group and stop receiving emails from it, send > an > >> email to [email protected] <javascript:>. > >> To view this discussion on the web visit > >> > https://groups.google.com/a/apereo.org/d/msgid/cas-user/d127cbd1-49cb-4f4c-bb81-72899fd1af16%40apereo.org > > >> < > https://groups.google.com/a/apereo.org/d/msgid/cas-user/d127cbd1-49cb-4f4c-bb81-72899fd1af16%40apereo.org?utm_medium=email&utm_source=footer> > > > >> . > >> > >> > >> -- > >> Ray Bon > >> Programmer Analyst > >> Development Services, University Systems > >> 2507218831 | CLE C023 | [email protected] <javascript:> > >> > >> > > > > -- > > - CAS gitter chatroom: https://gitter.im/apereo/cas > > - CAS mailing list guidelines: > https://apereo.github.io/cas/Mailing-Lists.html > > - CAS documentation website: https://apereo.github.io/cas > > - CAS project website: https://github.com/apereo/cas > > --- > > You received this message because you are subscribed to the Google > Groups "CAS Community" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] <javascript:>. > > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/c838e85f-b08b-4bcb-a384-5972cb3aaf47%40apereo.org. > > > > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/23958629-5ab9-4ee9-a085-3cdb6a01eb02%40apereo.org.
