if user goes to another app using CAS, browser will need to send TGT ticket (CAS Protocol diagram shows it is getting that from cookie).
If TGT is not in cookie, where does the browser getting it from when user goes to another app. that uses CAS (after he login in successfully into the first app.)? Yan On Tuesday, April 12, 2016 at 11:21:42 AM UTC-4, Misagh Moayyed wrote: > > The TGC is encrypted and signed. You wouldn’t know what’s inside it and > wouldn’t have access to it. (The protocol does not say that TGC is the same > as TGT. It says it is a representation of the TGT identifying the sso > session). > > > > What kind of subsequent requests? > > > > *From:* Yan Zhou [mailto:[email protected] <javascript:>] > *Sent:* Tuesday, April 12, 2016 7:02 AM > *To:* Misagh Moayyed <[email protected] <javascript:>> > *Cc:* CAS Community <[email protected] <javascript:>> > *Subject:* Re: [cas-user] where is TGT stored on client side? > > > > OK, can you elaborate a bit? I am curious how this is done. > > > > I see SET-COOKIE on TGC xxxx when authentication is complete, but I do > not see browser sends the TGT cookie along with subsequent request. > > > > So, I wonder how this works. > > > > Thx, > > Yan > > > > On Tue, Apr 12, 2016 at 9:55 AM, Misagh Moayyed <[email protected] > <javascript:>> wrote: > > You cannot see it. > > > > *From:* [email protected] <javascript:> [mailto:[email protected] > <javascript:>] *On Behalf Of *Yan Zhou > *Sent:* Tuesday, April 12, 2016 6:46 AM > *To:* CAS Community <[email protected] <javascript:>> > *Subject:* [cas-user] where is TGT stored on client side? > > > > Hi there, > > > > The CAS protocol says that TGT is stored as a cookie on client browser. > But, when I look at cookie on browser (Chrome), I do not see TGT, the only > one there is CASSESSIONID, which is how CAS tracks user place in the login > flow. > > > > Where is TGT stored on client? How can I see it? > > > > Everything works fine on server side, I do see TGT, etc., I just cannot > find where it is stored on client. > > > > Thanks, > > Yan > > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <javascript:>. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/ > . > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/15308aa1-497b-4c19-82da-a7d88b6a4b32%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/15308aa1-497b-4c19-82da-a7d88b6a4b32%40apereo.org?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/a/apereo.org/d/optout. > > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <javascript:>. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/ > . > > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/00dd01d194c3%24060ddb40%24122991c0%24%40unicon.net > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/00dd01d194c3%24060ddb40%24122991c0%24%40unicon.net?utm_medium=email&utm_source=footer> > . > > > For more options, visit https://groups.google.com/a/apereo.org/d/optout. > > > -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c6bc4555-cfdf-415a-8a99-cec04fa0401a%40apereo.org. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
