Just want to elaborate more on what i am trying to do:

1. during login i want to save the service-ticket to database with 
status=active
2. once CAS logout is triggered (from other app or via url-../cas/logout) 
inside my logout method, i will update service-ticket status to 'loggedOut.
3. subsequent action in my current app will notice that current status is 
now "loggedOut" so it will force to invalidate the session and force user 
to re-login

i can get service-ticket id during logout, 
but how to get service-ticket-id during login?

Thanks all,


On Thursday, 2 November 2017 19:14:25 UTC+8, Edward wrote:
>
> Hi All,
> I am using CAS 5.1.3
> and  have configured Single Log Out for my CAS Oauth2 client.
>
> from the cas.log, once i trigger CAS-Logout from this url: (
> https://mydomain.com:8443/cas/logout), CAS did successfully send this 
> logout message to my client app.:
> <?xml version="1.0" encoding="UTF-8"?>
> <samlp:LogoutRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" 
> ID="LR-22-Dngg6HgOXzM3CoVSU9dNObcWaC3TJlgMAT0" Version="2.0" 
> IssueInstant="2017-11-02T18:11:25Z">
>    <saml:NameID 
> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">@NOT_USED@</saml:NameID>
>   
>  
> <samlp:SessionIndex>ST-34-NGtUaZ5HfWFBMEiH7UDq-DOMAIN123767</samlp:SessionIndex>
> </samlp:LogoutRequest>
>
> my client-app logout method get called, and i can see this message coming 
> in.
> the problem is how do i map back this service ticket 
> "ST-34-NGtUaZ5HfWFBMEiH7UDq-DOMAIN123767" to my current client session? 
> so that i can clear the specific session for this service ticket.
> as i am using oauth protocol, my cas-oauth client didn't know the 
> service-ticket information.
>
> is there any way i can get the service ticket information during login?
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/3b6e5178-677e-4fc0-a000-3c2a1e5952b3%40apereo.org.

Reply via email to