On Wed, Aug 17, 2011 at 10:26 AM, Ravi Julapalli <[email protected]> wrote:
> Hi, > We have been looking at CAS being a solution to federate a set of > internal and external websites. > One of the key requirements of our project is to have a "encrypted digest" > that is passed by client sites to server so as to validate that requests are > indeed coming from known sources. > Any reason locking it down via the existing services management tool won't work? > The algorithm for Digest and what constitutes the digest is being custom > built by us. > We would also like to change the format of XML responses that are sent out > by server. > The XML is merely stored in JSP pages that you can change (unless you're using SAML) > > I am seeking for some guidance on the following > 1. Is there existing ability with CAS to perform a preliminary check > requests (authenticate etc) are addressed. > You can easily do it as part of the login flow (which is a Spring Web Flow file), though I would confirm that the Services Management Tool doesn't meet your needs. > 2. If we are to write this custom piece of code , where would we have to > write this code. > 3. How can we change the structure of XML response from CAS on a validate > request. Our intention is to have all validations done as RESTful with XML > responses. > There are a number of JSP pages in the webapp that you would need to replace. All CAS Service validate calls are "RESTful-like" and they already work with all clients so I don't know what benefit you gain by customizing them. Cheers, Scott > Being new to CAS and also to Java, any help provided enabling me to > understand the architecture better and help resolving requirements is > greatly appreciated. > best regards, > Ravi > > > -- > You are currently subscribed to [email protected] as: > [email protected] > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-dev > > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
