Thanks Scott and Joachim, you just confirmed what I was thinking.  I've already 
begun the work of encoding those parameters and then cleaning them up again 
afterwards.

Cheers,
Josh


On Jul 2, 2010, at 1:53 AM, Joachim Fritschi wrote:

> As far as i know http fragments in contrast to GET parameters are web-client 
> only parameters. They are never passed on to any webserver. Your webbrowser 
> interprets them when they are appended to a link but does not include them in 
> the actual query. That way no cas clients or servers will ever be able to 
> keep them during authentication.
> 
> http://en.wikipedia.org/wiki/Fragment_identifier
> 
> The usage of fragments as pseudo parameters with values is an ugly web 2.0 
> hack :p
> 
> One possible solution for you could be to urlencode your fragments into a 
> real http parameter on all your webpages. These encoded fragments would 
> "survive" the cas redirects and you could decode them later. Another option 
> could be to simply change your urls to
> 
> http://myapp.com/?deeplink=page42#deeplink=page42
> 
> and after the login you rewrite the parameter back to a fragment.
> 
> Cheers,
> 
> Joachim
> 
> 
> 
> 
> 
> Am 02.07.2010 04:31, schrieb Scott Battaglia:
>> Apparently the hash is not sent to the server so we have no way of
>> appending it.  If anyone knows different let us know and we'll adjust
>> the CAS clients as appropriate.
>> 
>> 
>> On Thu, Jul 1, 2010 at 4:41 PM, Josh <[email protected]
>> <mailto:[email protected]>> wrote:
>> 
>>    I have a flash application that modifies the url with new hash
>>    params to allow the user to deep link into specific sub-pages of the
>>    application.  When I wrap this app with cas and attempt to access
>>    one of these deep link urls while not being logged in, I am properly
>>    redirected to the cas login screen, but after logging in, cas will
>>    drop the hash portion of the url when it redirects me back to my
>>    app.  Is there any way to tell cas to keep the hash params?
>> 
>>    This works:
>>    http://myapp.com/?deeplink=page42
>> 
>>    This does not work:
>>    http://myapp.com/#deeplink=page42
>>    (after I do the cas login, I'm redirected back to http://myapp.com,
>>    without the hash params)
>>    --
>>    You are currently subscribed to [email protected]
>>    <mailto:[email protected]> as: [email protected]
>>    <mailto:[email protected]>
>>    To unsubscribe, change settings or access archives, see
>>    http://www.ja-sig.org/wiki/display/JSG/cas-user
>> 
>> 
>> --
>> You are currently subscribed to [email protected] as: 
>> [email protected]
>> To unsubscribe, change settings or access archives, see 
>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>> 
> 
> 
> -- 
> Joachim Fritschi
> Hochschulrechenzentrum (HRZ)
> L1|01 Raum 248
> Petersenstr. 30
> 64287 Darmstadt
> 
> Tel. +49 6151 16-5638
> Fax. +49 6151 16-3050
> E-Mail: [email protected]
> 


-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to