Ignore me! Eclipse did not picking up the web.xml changes. https://bugs.eclipse.org/bugs/show_bug.cgi?id=287321 Not a bug. but follow what suggested by Larry Isaacs it works 在 2017年8月31日星期四 UTC-4上午10:21:48，SOPHIE Fang写道： > > I decided to exclude certain urls from going through CAS.... how 'lazy' > am i ..:) i think it's fine as it's all internal... > I set up my authentication filter like belows and put a debug point in > AuthenticationFilter; however, i didn't see ignorePattern being picked up > by the code, it still shows null... > <filter> > <filter-name>CAS Authentication Filter</filter-name> > > <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class> > <init-param> > <param-name>casServerLoginUrl</param-name> > <param-value>https://sophiesophie:8443/cas/login</param-value> > </init-param> > <init-param> > <param-name>serverName</param-name> > <param-value>https://sophiesophie:8444</param-value> > </init-param> > <init-param> > <param-name>ignorePattern</param-name> > <param-value>https://sophiesophie:8444/research</param-value> > </init-param> > <init-param> > <param-name>ignoreUrlPatternType</param-name> > <param-value>REGEX</param-value> > </init-param> > </filter> > 在 2017年8月28日星期一 UTC-4下午5:08:51，rbon写道： >> >> If application B is acting on behalf of the user, then proxying is what >> you are looking for. >> >> https://apereo.github.io/cas/5.1.x/installation/Configuring-Proxy-Authentication.html >> >> If application B is running background tasks, then the one 'special' user >> in application B can use CAS REST api to log in to application A. >> >> Ray >> >> On Mon, 2017-08-28 at 11:17 -0700, SOPHIE Fang wrote: >> >> Totally agree... >> i already have cold-feet as i am reading more into it.... >> As I am customizing the login page, i will probably accept your >> suggestion.:) >> May i ask another question? >> I have an Application A which is Java based and Application B which is >> Python based. Application B calls Application A quite a lot by calling A's >> API; e.x. >> http://applicationA.corp.com/TaskManager?taskId=1&&isCompleted=true >> >> Since i turned on SSO, right now Application A is https and unless >> someone logged in, it's not possible to make the call anymore as it's a >> application-to-application interaction. Do you have something in mind thus >> i can keep this behavior normal as before? >> I would say millions of thank you. And i hope people who is struggling >> like me can benefit from all this! >> >> 在 2017年8月28日星期一 UTC-4下午1:41:46，rbon写道： >> >> Sophie, >> >> CAS definitely has a lot of moving parts. Patience, small steps and lots >> of testing. >> >> If I understand correctly, your client application has a login form. You >> should be able to use REST to pass that user's credentials to the CAS >> server without having to redirect. >> If that is the route you choose, you will have to keep track of the >> user's session and associate it with the TGT. You may also have to manage >> session expiration. This sounds like a lot of work. >> If your client application does not have a login form, you will have to >> retrieve the user's login name and password from somewhere. This sounds >> risky. >> >> Is there a reason why you do not want to go through the redirect? >> >> If the user is already logged in through CAS the redirect will be very >> fast, the user will not notice. If you are concerned about the look of the >> login page, that can be customized to look like your application. >> >> Ray >> >> On Mon, 2017-08-28 at 10:01 -0700, SOPHIE Fang wrote: >> >> Thank you for the speedy answer! Really Appreciate it!! >> My questions might sound pretty silly to someone already quite familiar >> with the CAS Protocal. But still newbie as i am, may i ask..: >> Why the REST Protocol sounds like it's for application-to-application >> authentication. Will it really help my case? >> What i am trying to do-- Instead of redirecting to the cas login page >> everytime user hit my client application, user can just stay in my client >> application and hit login then somehow get authenticated via CAS while >> staying in the same page. Do you know the step by step how to achieve >> this? As i know about CAS so far, there is no baby sitting step by step. >> It's more like playing a puzzles gathering people's experience here and >> there. >> >> 在 2017年8月28日星期一 UTC-4上午11:44:05，rbon写道： >> >> Is this what you are looking for? >> https://apereo.github.io/cas/5.1.x/protocol/REST-Protocol.html >> >> Ray >> >> On Mon, 2017-08-28 at 07:21 -0700, SOPHIE Fang wrote: >> >> Did you find the way to do it? >> Thx! >> >> 在 2017年3月21日星期二 UTC-4上午10:24:34，Hao Wu写道： >> >> Hello all, >> I want to embed the login form in the client page, without reidrection, >> have googled for some solutions about 3.x or 4.x, is there any solutions >> for 5.x? Thanks >> >> >> -- >> Ray Bon >> Programmer analyst >> Development Services, University Systems >> 2507218831 | CLE 023 | [email protected] >> >> >> -- >> Ray Bon >> Programmer analyst >> Development Services, University Systems >> 2507218831 | CLE 023 | [email protected] >> >> >> -- >> Ray Bon >> Programmer analyst >> Development Services, University Systems >> 2507218831 | CLE 023 | [email protected] >> >>
-- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/961f2df5-82e9-4f18-a03f-d5893806961c%40apereo.org.
