Hello,

I have a Flex2 Webapp launching from a CAS protected jsp page.  The Flex2
Webapp uses WebServices which will also be CAS protected (via Mule).  To be
able to proxy the user credentials from the Webapp to the WebServices I am
creating some ProxyTickets on the initial access to the Flex2 Webapp jsp
page and passing these to Flex2 via flashvars.  Flex does not work with
Httpsession (unless I pay 20K USD for Flex Data Services) so this creates a
few issues.

I can then use these ProxyTickets to get the user credentials securely at
the WebServices.

My questions.  

1) If a ProxyTicket is not used immediately to query a backend WebService,
how long before it expires? i.e. the proxy ticket is stored on the client
until used, which could be for some time.

2) Is it intended that a new ProxyTicket be created prior to each request to
a backend service?

Thanks for the help,
Luke.
-- 
View this message in context: 
http://www.nabble.com/ProxyTicket-Timeout-period-tf3398852.html#a9464218
Sent from the CAS Users mailing list archive at Nabble.com.

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to