Hi everyone.

What is the default expiration time for the JSESSION cookie of tomcat for 
cas?
I would like to increase it, as I thing it is small right now, but it is 
not working when I use the 
server.connection-timeout or server.session.timeout configs.

The problem: 
I notice that when I try to login to an app via CAS, with okta as 
authenticator, the JSESSION changes if I do not authenticate quickly, 
making the service to be lost (as is stored in the session) and redirecting 
me to CAS green screen instead of the app's screen.
So the normal path in my setup is
1. application login page
2. redirection to cas (JSESSION creation)
3. redirection to okta
4. redirection back to cas
5. redirection back to application

but if in step 3 I do not give the credentials immediately and wait for 
some minutes,
the JSESSION is changing, causing the path to finish in step 4. (and not be 
able to create service ticket)

Have anyone faced this issue before or know how this could be fixed?

I am using cas 5.2.9 and Spring Boot Version: 1.5.12.RELEASE Apache 
Tomcat/8.5.35

Thank you,
Ria

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/18a176ab-017a-4c19-9fcb-00b29742a3ecn%40apereo.org.

Reply via email to