Hi all,

This is my first message here, hopefully not the last. I'm not a Java 
developper, I'm mostly code in PHP (@drupol on Github 
<https://github.com/drupol/>)

Recently, I've been asked to develop a standard PHP library for CAS 
authentication(work in progress) <https://github.com/drupol/psrcas/> and in 
order to do it, I had to learn how the CAS protocol is working.

When developing the proxy callback I noticed that the CAS server is doing a 
*GET* request to check if the proxy callback URL is properly working.

My question is the following

Don't you think that it would be more appropriate to check the existence of 
the proxy callback url using a request of type OPTIONS 
<https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods/OPTIONS> instead 
of GET ?

It would be easier to identify on the client side and ... why not use the 
proper request type when it exist ?
It would also remove the discrepancy when it comes to what is supposed to 
return the proxy callback url when it is called (*there is currently no 
documentation about this yet*)

Let me know what you think.

Regards.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/f68d44ef-0074-4ab1-8faf-9d1e2c706b3b%40apereo.org.

Reply via email to