You always want to post to @apereo.org mailing lists.
Losing the cipher certainly matters security-wise, yes. Replay attacks may be possible. So to start with: 1. Lose the cipher, see if the issue goes way. If so, put the cipher back and investigate the failing factor. If not, move on. 2. See if an externalRedirect semantic works. 3. Manually issue a redirect in your JSP/Action/etc From: [email protected] [mailto:[email protected]] On Behalf Of aukevanleeuwen Sent: Friday, March 4, 2016 8:53 AM To: CAS Community <[email protected]> Subject: [cas-user] Encrypted flow keys and redirect=true in webflow Hello, I'm in the middle of an upgrade to 4.2.x, however I have some problems with the new encrypted flow keys in CAS. I have some extensions to the webflow for which I want to use redirect="true" on a view state in login-webflow: <view-state id="askPasswordForSocialRegistrationView" view="askPasswordForSocialRegistrationView" model="social" redirect="true"> <transition to="checkPassword"/> </view-state> Now if I do that I get a redirect to a very long url. It differs a bit (probably because the default is a compressed cipher), but it's in the range of 6000 - 9000 characters. That is a bit long for a redirect (at least Tomcat has a default maximum of 8096 characters (top of my head) before it will bail out). I really need the redirect, so what are my options? Can I lose the cipher? Does it matter security-wise? PS. Sorry if I double posted this to the old groups? I got a message saying the other (Jasig) lists were decomissioned. Auke -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
