Johan Andries wrote:
Vladimir Horev wrote:
Hi all!
Could you please explain me what lacks CAS that we need to write an additional single sign on system? In general, which features are you going to implement in near future? I mean, I have no strong preference, but I feel that a sample application is not sufficient for me.
One thing the integrated CAS SSO lacks is the fact that it limits the user to browser-only applications because the system uses HTTP redirects. At least, that's what I found out while reading the docs. So this is, AFAIK, an important reason why it would be interesting for other SSO systems to be integrated in acegi.
The "cas" mailing list contains various situations in which people have used CAS 2 with client-side applications. Indeed I am pretty sure I can recall some Acegi Security users using CAS integration from client-side apps as well.
If you visit http://jasigch.princeton.edu:9000/display/CAS/CAS3+Design+and+Development you'll see the design work going on for CAS 3.0. Scott Battaglia and Dmitriy Kopylenko are committers on both the CAS 3 and Acegi Security projects, thus helping to ensure ongoing compatibility. You might be interested in emailing Scott and Dmitriy regarding opportunities to contribute to CAS 3.0.
If Vladimir is still looking for an area for his thesis, I think there would probably be value focusing on some of the features mentioned earlier on this thread. Things like addressing ACL filtering with pagination, or ACL mutation of objects with Hibernate, would be of great value to many in the community and are part of practical "real world" security requirements of enterprise applications.
Best regards Ben
------------------------------------------------------- The SF.Net email is sponsored by: Beat the post-holiday blues Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek. It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt _______________________________________________ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
