[cas-user] OAuth doesn't work since version 6.6.6

2023-04-03 Thread M. Ebrahimi
Hello I recently updated CAS from 6.6.4 to 6.6.6 and found that it is not possible to log in with OAuth. This problem also exists in version 6.6.7. The error that occurs when entering is as follows: ERROR [org.apereo.cas.util.serialization.AbstractJacksonBackedStringSerializer] - https://

Re: [cas-user] Re: JWT as Service Ticket, not found in JPA DB

2023-04-03 Thread Ray Bon
Pablo, Are you looking for this flow diagram, https://apereo.github.io/cas/6.6.x/installation/Configure-ServiceTicket-JWT.html#flow-diagram ? JWTs are validated on the service side, not in CAS. Ray On Fri, 2023-03-31 at 19:07 -0700, Pablo Vidaurri wrote: Notice: This message was sent from out

[cas-user] CAS 6.6.x - Override Spring Version

2023-04-03 Thread 'Chris Durham' via CAS Community
Hi, We use the overlay version of CAS 6.6.7 and because of Snyk warnings need to override the version of Spring from 5.3.22 to 5.3.26. I've been back through the log4j remediation stuff and tried to follow those guidelines alongside an older requirement to upgrade Spring from 5.2.0, but am una

Re: [cas-user] CAS 6.6.x - Override Spring Version

2023-04-03 Thread Ray Bon
Chris, I have this in my build.gradle configurations.all { resolutionStrategy { cacheChangingModulesFor 0, "seconds" cacheDynamicVersionsFor 0, "seconds" preferProjectModules() def failIfConflict = project.hasProperty("failOnVersionConflict") && Boolean.valueOf(project.getProperty("failOnVersio

[cas-user] Override the Spring Vulnerable version in the cas 6.6.6

2023-04-03 Thread Raj Vivid
HI Team, While using the cas 6.6.6, we found that it internally uses the vulnerable Spring framework version ( https://mvnrepository.com/artifact/org.springframework.boot/spring-boot/2.7.3) while building the war, Is there any way we can override the usage of Spring version so that we can avo

[cas-user] CAS 6.6.x - Duplicate Application Context Initialization in CasFlowHandlerMapping

2023-04-03 Thread Milan Siebenbürger
Hello, we have upgraded CAS from version 6.5.x to 6.6.x. However, after the upgrade process, we encountered a problem with user throttling. Upon investigating the code, it appears that the issue is caused by duplicate application context initialization in *CasFlowHandlerMapping*. This is due d