Hi there, 

I am writing java code to simulate login to CAS protected web app., so that 
our QA automation team can use that to test apps protected by CAS, without 
manually login to CAS over and over.  

I have carefully preserved the cookie and tickets values in each calls as 
browser would., but when my code calls the /cas/login endpoint to 
authenticate user credential, I always gets error:

You cannot attempt to re-submit a form that has been submitted already.

On server side, it says: invalid login ticket, even though the ticket is 
indeed valid. 

2016-05-09 19:29:59,146 DEBUG 
[org.jasig.cas.web.flow.GenerateLoginTicketAction] - Generated login ticket 
LT-2514-G5i7xw4qGewjAgGnCPFwYtcTOcNypo-devcas02.dev.medplus.com

2016-05-09 19:30:07,872 WARN 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Invalid login ticket 
[LT-2514-G5i7xw4qGewjAgGnCPFwYtcTOcNypo-devcas02.dev.medplus.com]

what is the purpose of the following check in AuthenticationViaFormAction?

    protected boolean checkLoginTicketIfExists(final RequestContext 
context) {
        final String loginTicketFromFlowScope = 
WebUtils.getLoginTicketFromFlowScope(context);
        final String loginTicketFromRequest = 
WebUtils.getLoginTicketFromRequest(context);


Thanks,
Yan

-- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/91586f22-25c8-46ce-a0f7-0189f4dd1d89%40apereo.org.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

Reply via email to