Am 11.11.2009 um 15:26 schrieb Scott Battaglia: > On Mon, Nov 9, 2009 at 4:29 PM, Robert Oschwald <[email protected]> > wrote: > I'm using CAS with RememberMe. > I need to invalidate a users Tickets (force relogin on next visit) from one > of my client apps. > For this, I'm thinking of a REST Service, Servlet or SOAP Endpoint. > > Is it not sufficient to send a renew=true to force them to log back in? > This assumes the user is online. But thats not always the case.
Scenario: User has a valid long term TGC and is not online. In the User Database, the Username is changed (either by another system or by the user but he used another browser (e.g. first Firefox, then Safari to change his Username, which is an emailaddr.) We must ensure that all users need to interactively relogin on next visit if email-address gets changed. > > Any pointers on how to implement it? > I need to supply the users username, and thinking of a way to remove all > tickets for this user from the TicketRegistry. > > We don't actually store based on username. So you'd have to write something > custom that would map that userid to the ticketid so that you could later > retrieve the ticket ID. > > Is this an enhancement for a future version? Robert -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
