Always a pleasure. Post back any and all findings. > From: "Mallory, Erik" <[email protected]> > To: [email protected] > Sent: Thursday, August 24, 2017 11:18:19 AM > Subject: Re: [cas-user] REST Endpoints and Unencrypted TGT
> Much obliged sir, I’ll keep at it. Thanks for your time. > Erik Mallory > Server Analyst > Wichita State University > From: <[email protected]> on behalf of Misagh Moayyed <[email protected]> > Reply-To: "[email protected]" <[email protected]> > Date: Thursday, August 24, 2017 at 11:40 AM > To: "[email protected]" <[email protected]> > Subject: Re: [cas-user] REST Endpoints and Unencrypted TGT >> I’d expect to be able to put what was received from the rest endpoints (the >> TGT) >> in a cookie and be authenticated. Obviously, I’m wrong. > If I am reading things right, this bit is key. When you handle and do things > with REST, you're "on your own". You're responsible for cookies (or not) if > you > wish to manage the SSO session. It's up to you, because you're handed the TGT > and you get to decide what to do with it. You are the CAS server, essentially. > If you want the CAS server to be a CAS server handling sso then you need to > find a different authentication mode. REST won't do. With this, it's just > brokering authentication. > You will also need to look into logs to figure out what happens to that > ticket. > Needless to say, you can only validate it once, and you cant pass it onto > something else. For that you need proxy tickets. > -- > --Misagh > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups "CAS > Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email > to [email protected] . > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/2135284935.4347486.1503592845208.JavaMail.zimbra%40unicon.net > . > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups "CAS > Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email > to [email protected] . > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/08D52D3F-D5D2-4F2D-A13E-A185A0FF73C2%40wichita.edu > . -- --Misagh -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/371952898.4373537.1503605579631.JavaMail.zimbra%40unicon.net.
