It will be better if the connection is made secure. The TGC is what gives your 
user access to the applications. If that cookie gets hijacked, ..., security 
problems.

Ray

On Thu, 2020-08-20 at 02:44 -0700, denizg wrote:
I checked browser network tab. After successfull login, the set-cookie TGC 
header is returned but chrome blocks it (the set cookie was blocked because it 
had the "secure"
attribute but was not received over a secure connection.). So, there is no TGC 
cookie and it treats like you didnt login.

I added this configuration to cas.properties, the problem solved.
cas.tgc.secure=false

19 Ağustos 2020 Çarşamba tarihinde saat 12:37:47 UTC+3 itibarıyla denizg 
şunları yazdı:
I can login successfully to CAS. After success login, it shows authentication 
details page like below picture (loginsuccess.png).

When i try to login without login, it shows login screen (relogin.png), but i 
expect authentication details page, because i logged in before.

It creates many problem for me. How can i solve this? (btw, i tried demos in 
this page https://apereo.github.io/cas/Demos.html , and it works expected.)

gradle.properties
cas.version=6.3.0-SNAPSHOT (also tried with 6.2.0)

cas.properties
cas.server.name<http://cas.server.name>=http://localhost:8443
cas.server.prefix=${cas.server.name<http://cas.server.name>}/cas
logging.config=file:/etc/cas/config/log4j2.xml
server.ssl.enabled=false
# cas.authn.accept.users=



--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | [email protected]<mailto:[email protected]>

I respectfully acknowledge that my place of work is located within the 
ancestral, traditional and unceded territory of the Songhees, Esquimalt and 
WSÁNEĆ Nations.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/869b9b2e90b13b8e226308de28f550efb3a3a97c.camel%40uvic.ca.

Reply via email to