On Jan 30, 2008 2:10 AM, Marat Radchenko <[EMAIL PROTECTED]> wrote: > I'd like to tell my thoughts about cas-client-3.1. > > 1) It no longer depends on cas-server-core. That's great. Much more simple > config (plain strings/urls instead of ServiceImpl)
Yes, I thought that would be simpler ;-) > > 2) SpringConfiguredProxyReceptorServlet suddenly disappeared. That's > annoying (backward-compatibility lost). It was replaced with > Cas20ProxyReceivingTicketValidationFilter. Yes, it was removed on purpose as it depended on Spring entirely, which this library doesn't. > > 3) SingleSignOutHttpSessionListener ticket/session mapping won't survive > server restart (even if sessions are not lost). That would be ok if there > were any possibility to inject smarter-than-hashmap storage. However it > isn't possible, so the only way is a full rewrite. Additionally, it will > have troubles in case of many sessions because it stores all of them in > memory. If you had a JIRA issue I can attempt to make it similar to the ProxyReceptorServlet where we provide the base and you implement two methods that do the delete/retrieval. Though memory should not be an issue as they are only references to the session objects that already exist. And those references should be deleted when the session expires. > > 4) The worst thing: AbstractConfigurationFilter and all its descendants > cannot be configured from spring anymore. We use multiple profiles and > separate settings in .properties file. However in order to upgrade to > cas-client-3.1 we will have to do one of the following: > a) extend filter and add spring-friendly configuration means > b) create multiple web.xml files (i strongly dislike this option) > c) backport required stuff to cas-client-3.0 Yes, actually it can still be configured via Spring. All of the filters should have setters for their various properties. We haven't done extensive testing with it, but the goal was to allow you to either use the web.xml for simple cases, or utilizing something else like Spring. We have some information on it here: http://www.ja-sig.org/wiki/display/CASC/Configuring+the+JA-SIG+CAS+Client+for+Java+using+Spring (though it does look like I have one typo related to the proxycallbackUrl.) Hope that helps. Thanks for the feedback. -Scott > > > Hope this feedback will help. I'm ready to discuss above problems so we > could find ways to solve them. > > > 2008/1/29, Scott Battaglia <[EMAIL PROTECTED]>: > > The RC2 binary and source jars in the repo. I'm having trouble having > it > > generate the javadocs so those are not in there right now. > > > > -Scott > > > > > > On Jan 29, 2008 9:37 AM, Marat Radchenko <[EMAIL PROTECTED]> > > wrote: > > > > > Additionally, please add sources and javadoc jar to repo. Thanks. > > > > > > 2008/1/29, Scott Battaglia <[EMAIL PROTECTED]>: > > > > > > > > > > > > > I'm building an RC2 shortly. When that happens I'll make sure all > of > > the > > > > correct stuff ends up in the repo ;-) > > > > > > > > Thanks > > > > -Scott > > > > > > > > > > > > On Jan 28, 2008 8:09 AM, Marat Radchenko < > [EMAIL PROTECTED]> > > > > wrote: > > > > > > > > > maven repo error: > > > > > cas-client-core-3.1-RC1 uses cas-client-3.1-RC1 as parent pom. > > > > > But there isn't any in > > > > > > > > > > > http://developer.ja-sig.org/maven2/org/jasig/cas/cas-client/ > > > > > > > > > > > > > > > 2008/1/28, Scott Battaglia <[EMAIL PROTECTED]>: > > > > > > > > > > > > > > > > > > > > > Thanks! I'll look at this tomorrow at work. > > > > > > > > > > > > -Scott > > > > > > > > > > > > > > > > > > On Jan 25, 2008 3:18 PM, rg <[EMAIL PROTECTED]> wrote: > > > > > > > Great! I have created the JIRA: > > > > > > > http://www.ja-sig.org/issues/browse/CASC-34 > > > > > > > > > > > > > > > > > > > > > -rg > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Jan 25, 2008 2:28 PM, Scott Battaglia > > <[EMAIL PROTECTED]> > > > > > > wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Adding a template method sounds relatively reasonable. If > you > > can > > > > > > create a JIRA issue to track it that would be great. I'll also > > probably > > > > > > look into whether it makes sense to add one for failure too. > > > > > > > > > > > > > > > > -Scott > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Jan 25, 2008 2:19 PM, rg <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > > > > > > I was afraid you were going to ask that question ;) > > > > > > > > > > > > > > > > > > > > > > > > > > > Basically it's to deal with a scenario I mentioned in a > prior > > > > email. > > > > > > See question #1 here: > > > > > > > > > > > > > > > > > > > > > http://article.gmane.org/gmane.comp.java.jasig.cas.user/4230 > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > How I am dealing with this scenario, is I created my own > > > > > > ExpirationPolicy which looks in a database for the last accessed > > time > > > > for > > > > > > the users ticket grating ticket OR service ticket. When the > user > > makes > > > > an > > > > > > http request to a service webapp, an internal web service call > will > > be > > > > made > > > > > > to update this "last accessed time" in the database. What that > > means is > > > > I > > > > > > need to hold onto the service ticket IDs in the http session for > > each > > > > > > service. > > > > > > > > > > > > > > > > > > > > > > > > > > > The problem I have is finding the appropriate place in the > > > > lifecycle > > > > > > of the service ticket validation http request to put the service > > ticket > > > > ID > > > > > > in the http session. This is what I want to do right after the > > ticket > > > > is > > > > > > validated. And now that I think about it a little more, the > > template > > > > method > > > > > > would need to be something like: > > > > > > > > > onServiceTicketSuccess(ServletRequest, > > > > > > ServletResponse, Assertion) > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I'm guessing you are going to have a negative reaction to > what > > I > > > > just > > > > > > described. But know that I have control over the CAS webapp, > and > > every > > > > > > single webapp that uses CAS for authentication. This is a > closed > > system > > > > > > with only my webapps. > > > > > > > > > > > > > > > > > > > > > > > > > > > -rg > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Jan 25, 2008 11:39 AM, Scott Battaglia > > > > <[EMAIL PROTECTED]> > > > > > > wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > rg, > > > > > > > > > > > > > > > > > > > > What's your use case for the functionality that needs to > > happen > > > > > > after a successful service ticket validation? This way we can > > figure > > > > out > > > > > > the best way to make the library extendable. > > > > > > > > > > > > > > > > > > > > -Scott > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Jan 25, 2008 9:55 AM, rg <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > > > > > > > > > > I have been using the 3.1 RC1 client for a few days in > the > > > > > > prototype I'm building. So my perspective of the release client > is > > > > limited, > > > > > > but, so far I haven't seen any bugs. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > One change that i would like to be considered is to > change > > > > > > Cas20ProxyReceivingTicketValidationFilter to NOT be > > > > marked > > > > > > final, and to have a new template method > > > > > > onServiceTicketSuccess() declared in > > > > > > AbstractTicketValidationFilter and called in doFilter() > > > > > > after this.ticketValidator.validate(). This way I can extend > > > > > > Cas20ProxyReceivingTicketValidationFilter and > > override > > > > > > onServiceTicketSuccess(). > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I understand the goal to keep certain things final, > but, > > all i > > > > > > want to do is add some code on successful service ticket > validation, > > and > > > > I > > > > > > don't see any way to do it currently. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > thanks, > > > > > > > > > > > -rg > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Jan 24, 2008 10:18 AM, Scott Battaglia > > > > > > <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > It can be found here: > > > > > > > > > > > > > > > > > > > > > > > > > http://www.ja-sig.org/downloads/cas-clients/cas-client-3.1-RC1-release.zip > > > > > > > > > > > > > > > > > > > > > > > > Documentation can be found here: > > > > > > > > > > > > > > > > > > > > > > > > http://www.ja-sig.org/wiki/display/CASC/CAS+Client+for+Java+3.1 > > > > > > > > > > > > > > > > > > > > > > > > If you can try it out and give us any feedback that > > would be > > > > > > great. We're looking to do a release soon so we can incorporate > it > > into > > > > the > > > > > > next version of Acegi. > > > > > > > > > > > > > > > > > > > > > > > > -Scott > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Jan 24, 2008 4:11 AM, Marat Radchenko > > > > > > <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > > > > > > > > > > > > > > Where I can download it? > > > > > > > > > > > > > > > > > > > > > > > > > > 2008/1/23, Scott Battaglia > > <[EMAIL PROTECTED]>: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Folks-- > > > > > > > > > > > > > > > > > > > > > > > > > > > > We want to get ready to do the CAS 3.1 client > > release > > > > for > > > > > > Java (so we can > > > > > > > > > > > > > > start working on 3.1.1). I've done some testing > of > > it > > > > > > locally. Has anyone > > > > > > > > > > > > > > else tested it that can say it works well? > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks > > > > > > > > > > > > > > -Scott > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > -Scott Battaglia > > > > > > > > > > > > > > LinkedIn: > > > > > > http://www.linkedin.com/in/scottbattaglia > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > > > > > Yale CAS mailing list > > > > > > > > > > > > > > [email protected] > > > > > > > > > > > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > > > > Yale CAS mailing list > > > > > > > > > > > > > [email protected] > > > > > > > > > > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -Scott Battaglia > > > > > > > > > > > > > > > > > > > > > > > > LinkedIn: > > > > > > http://www.linkedin.com/in/scottbattaglia > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > > > > > > > > > > > > > > > Yale CAS mailing list > > > > > > > > > > > > [email protected] > > > > > > > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > > Yale CAS mailing list > > > > > > > > > > > [email protected] > > > > > > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > -Scott Battaglia > > > > > > > > > > > > > > > > > > > > LinkedIn: > > > > http://www.linkedin.com/in/scottbattaglia > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > > > > > > > > > > > Yale CAS mailing list > > > > > > > > > > [email protected] > > > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > Yale CAS mailing list > > > > > > > > > [email protected] > > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > -Scott Battaglia > > > > > > > > > > > > > > > > LinkedIn: > > http://www.linkedin.com/in/scottbattaglia > > > > > > > > _______________________________________________ > > > > > > > > > > > > > > > > Yale CAS mailing list > > > > > > > > [email protected] > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Yale CAS mailing list > > > > > > > [email protected] > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > -Scott Battaglia > > > > > > > > > > > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > > > > > _______________________________________________ > > > > > > > > > > > > > > > > > > > > > Yale CAS mailing list > > > > > > [email protected] > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > Yale CAS mailing list > > > > > [email protected] > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > -- > > > > -Scott Battaglia > > > > > > > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > > > _______________________________________________ > > > > Yale CAS mailing list > > > > [email protected] > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > _______________________________________________ > > > Yale CAS mailing list > > > [email protected] > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > -- > > -Scott Battaglia > > > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > _______________________________________________ > > Yale CAS mailing list > > [email protected] > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > > -- -Scott Battaglia LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
