Hi all,
I try since a too long time to make JWT Service Ticket works.
no problerm with dependencies cas-server-support-token-tickets (and
cas-server-support-token-webflow) in pom.xml
In cas.properties (version 5.2.0, names of parameters have changed)
...
## JWT authentification :
#
# cas.authn.token.name=
# cas.authn.token.principalTransformation.pattern=(.+)@example.org
#
cas.authn.token.principalTransformation.groovy.location=file:///etc/cas/config/principal.groovy
# cas.authn.token.principalTransformation.suffix=
#
cas.authn.token.principalTransformation.caseConversion=NONE|UPPERCASE|LOWERCASE
# cas.authn.token.principalTransformation.prefix=
## JWT Service Tickets :
#
cas.authn.token.crypto.enabled=true
cas.authn.token.crypto.encryptionEnabled=true
cas.authn.token.crypto.signing.key=S......................(the signing
key).....................................w
cas.authn.token.crypto.signing.keySize=512
cas.authn.token.crypto.encryption.key=Q........ (the encryption key) .....BM
cas.authn.token.crypto.encryption.keySize=256
cas.authn.token.crypto.alg=AES
...
Tests with a CAS client (php-cas) and JSON File for Service Registry :
{
"@class" : "org.apereo.cas.services.RegexRegisteredService",
"serviceId" : "^https://v-testcas01.*";,
"name" : "Service(s) Tickets JWT",
"id" : 10000008,
"evaluationOrder" : 15,
"properties" : {
"@class" : "java.util.HashMap",
"jwtAsServiceTicket" : {
"@class" :
"org.apereo.cas.services.DefaultRegisteredServiceProperty",
"values" : [ "java.util.HashSet", [ "true" ] ]
}
}
}
What exactly do jwtAsServiceTicket vs jwtAsResponse ?
No errors in log : TGT then ST then ST Validate but after that, nothing. No
trace of JWT (and TGC looks same).
How to be sure application received JWT and how to decrypt that ?
Where am i wrong in configuration ?
Many thanks for any help,
Best regards,
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/b33c1343-c7c9-49b5-90cf-cfd9a1faf6f4%40apereo.org.
