Hi,

I am implementing a custom login page instead of using the regular casLoginView 
with redirects and it is getting stuck.


1.       In the CAS web-flow I have placed an action-state that defines  my 
custom class which will redirect to my custom authentication application.

2.        My authentication servlet application is running on the same Tomcat 
server that CAS is running.  When the action class is triggered at the proper 
sequence in the web flow my servlet is invoked.

3.       My authentication servlet checks if the user was previously 
authenticated by checking a cookie.  If the cookie exists (and passes internal 
validation)  then it will redirect to CAS login with an encoded query parameter 
containing  information to create the credentials.  My understanding is that my 
custom class in the web flow will get called again and this is indeed partially 
true.

4.       Otherwise my servlet redirects to a page that prompts the user via a 
form to supply the necessary information. When the user submits the form a 
small javascript encodes the information, creates the cookie that my 
authentication servlet is looking for, and then redirects to my authentication 
servlet  (thusly returning to step 3).

If step 3 finds the cookie immediately it will redirect back to CAS everything 
works perfect (gets back into my action class which completes the sequence).  
However, if the page containing the form is displayed then the redirect back to 
CAS never happens and the flow is stuck.  I must have missed doing something 
essential but I am baffled at this point.

I deliberately put everything in an application separate from CAS in case there 
was some interference caused by the sign in form.  But it didn't make any 
difference.  I do not understand why everything works great if that form isn't 
displayed in the browser.  Once it is displayed, the redirect back to CAS never 
seems to happen.

Can someone point out where I might be missing something.

Many thanks in advance for help.

Bill

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to