Dear Rodriguez,

A while ago I tried to do this with a cookie (and succeeded in doing so). I've 
asked this question to the mailing list and you can find the answer here:
http://tp.its.yale.edu/pipermail/cas/2008-March/007789.html

This was the answer of Scott

If you are passing a token via an HttpServletRequest (either as a cookie or
some request parameter), you should extend the
AbstractNonInteractiveLoginAction to construct a credentials object from the
request parameter without prompting the user for anything (this is what the
X.509 and SPNEGO code does).  You'll then create an AuthenticationHandler
that can do stuff with that token (i.e. authenticate it) and a
CredentialsToPrincipalResolver that can find the principal for that token.
Wire them all up in the appropriate places (I make that sound so easy don't
I? ;-)) and you should be good to go.

-Scott

Regards,

Stefan



From: Unai Rodriguez
Sent: Fri 09-May-08 8:47
To: cas
Subject: Is there a way of invoking CAS through APIs or similar?


Dear All,

I am thinking of modifying the CAS login page to allow calls to URLs like
this:

https://mycasname/cas/login?user=xxxx&pass+yyyy

have CAS automatically try to login using the given parameters.

Is there something similar already built-in?

I am doing this for monitoring/testing purposes (i.e. every minute or so I
will have a script login in automatically to make sure CAS is fine).

thanksssssssssss,
unai

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to