After more debugging, I can see the TGT cookie being set with a max age of 0 during the Universal Prompt flow, but non-Duo enabled logins have the max age of the cookie being set to the configured cas.tgc.max-age property's value.
On Fri, Oct 7, 2022 at 10:29 AM David Malia <dmal...@gmail.com> wrote: > Hello, > > I'm attempting to upgrade CAS from 5.3.x to 6.5.x for the Duo Universal > Prompt changes. Currently on 6.5.8. I've noticed since enabling the > Universal Prompt, the TGT cookie is no longer being sent to the browser > when Duo auth occurs. If a user is not going through the Duo > authentication flow, the TGT cookie is set as expected. Is this something > expected? > > Thanks, > David Malia > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAL3JkEJpqw5kaLxPFPCHX3L3u_qzeMa1axU9Nk%3DBXCSSPRKcqQ%40mail.gmail.com.
