I need to figure out a way to pass the session info to CAS when I make a remote method call using xFire. Someone has to have needed to do this...Anyone?
----- Original Message ---- From: tedzo <[EMAIL PROTECTED]> To: Yale CAS mailing list <[email protected]> Sent: Monday, October 8, 2007 3:03:52 PM Subject: Re: Authenticating web service calls via CAS.. Ok, a bit of digging around- I found the remoteCentralAuthenticationService and xFireCentralAuthenticationService beans defined and commented. The comment asked for the bean to be uncommented in order to allow access as a web service (using xFire, which is good). Here is what I was thinking- 1. From client stub (of my web service that is to be exposed), pass credentials and query remoteCAS for a ticket. 2. Pass the ticket to my web service. 3. Validate the ticket from my web service (the actual implementation of the service to be exposed). If the ticket validates, then go ahead with the service. ELse fail. Does this seem to make sense? Questions- 1. Once a ticket is used/validated, it is no longer recognized by CAS. So, this essentially means my web service stub needs to validate everytime the client accesses the web service. So, how do I obtain a ticket that lasts longer than 1 call? 2. This method seems to require code changes to my web service (the implementation of the service). That doesn't sound right. I should be able to somehow use some existing class to intercept the call to the service and validate the ticket... Any pointers? Thanks. ----- Original Message ---- From: tedzo <[EMAIL PROTECTED]> To: Yale CAS mailing list <[email protected]> Sent: Monday, October 8, 2007 10:55:57 AM Subject: Authenticating web service calls via CAS.. I have a webapp that uses CAS for authentication. All that works fine. Now I need to expose some underlying operations as a web service and I plan to use XFire for that. I am trying to figure out if I can use CAS to authenticate the webservice invocation from the client. Can someone provide me with some pointers? I searched the archives and found a thread about this but not a whole lot- http://tp.its.yale.edu/pipermail/cas/2006-June/002882.html (the links provided in this thread are not functional anymore). Scott Battaglia mentions having some web service support for XFire. I couldn't find out more... Thanks. Fussy? Opinionated? Impossible to please? Perfect. Join Yahoo!'s user panel and lay it on us. Need a vacation? Get great deals to amazing places on Yahoo! Travel. ____________________________________________________________________________________ Don't let your dream ride pass you by. Make it a reality with Yahoo! Autos. http://autos.yahoo.com/index.html
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
