You can enforce it during ticket validation (i.e. the application ALSO sends renew=true).
On Thu, Dec 10, 2009 at 8:56 AM, Erhan Sen <[email protected]> wrote: > Yes I have read this in one of old archive mails. But what if some how a > user write CAS URL without renew=true? Won't there be any vulnerable or > problematic situations then? Can we have server side solutions/options for > this? Best Regards... > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
