Hi,
I have two java web modules:
- The first one is acccessed directly by the user and acting as CAS-Proxy
(proxy.war)
- The second one is acting as the proxied service (service.war)
- "proxy.war" is accessing "service.war" via REST calls of type GET.
The Proxy CAS mecanism is working correctlty. I got the tickets:
TicketGrantingTicket, PgtIOU, ProxyGrantingTicket.
Before that "proxy.war" invokes "service.war", I added the code in
"proxy.war" asking for ProxyTicket.
>>>String ticket = principal.getProxyTicketFor(targetURL); <<<
with targetURL = https://<host>:<port>/service/rest /* This is the
root context of all REST calls*/
As all the target sevices are REST calls of type GET, then each call will
be suffixed according to is arguments:
For example, it will be "https://<host>:<port>/service/rest/path1/argument1"
for a call and "https://<host>:<port>/service/rest/path2/argument2" for
another.
1/ Should I ask for a ticket for each REST call ?
Ex:
principal.getProxyTicketFor("https://<host>:<port>/service/rest/path1/argument1")
for a call
principal.getProxyTicketFor("https://<host>:<port>/service/rest/path2/argument2")
for another call
2/ Or, is it possible to get a unique ticket valid to a patten of URLs ?
If I use the PT issued by principal.getProxyTicketFor("https://
<host>:<port>/service/rest"),
this ticket won't be validated
(/poxyvalidate?ticket=<PT>&service=https://
<host>:<port>/service/rest/pathi/argumenti
What is wrong with what I'm doing ?
Thanks.
Alf.
--
View this message in context:
http://jasig.275507.n4.nabble.com/Limitation-when-proxied-service-is-a-REST-application-tp4658768.html
Sent from the CAS Users mailing list archive at Nabble.com.
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
