Yes I suppose I ll implement something like that. The only problem I see with 
this solution is that I have to duplicate the code to identify the "logout" 
request call from CAS. It's not a big deal but if in the future CAS server 
releases the processing of the single sign out changes, I would need to modify 
my custom logout handlers. If the current CAS single sign out filter would 
offer the possibility to add custom handlers, this kind of changes wouldn't be 
an issue for us... just an hint to the CAS developpers :)

Nonak


----- Original Message ----
From: Adam Rybicki <[EMAIL PROTECTED]>
To: Yale CAS mailing list <[email protected]>
Sent: Friday, May 16, 2008 9:31:04 PM
Subject: Re: Signle sign out filter customization

Nonak,

I think a better approach would be to add your own filter in which you
could perform the additional work.  You can have multiple filters
mapped to process each HTTP request, and the order of filter-mapping
elements in web.xml determines their order.

Adam

John Nonak wrote: 
Hi,

Sorry I m quite a newbie here. I looking for a way to apply custom
logout code uppon the CAS single sign out. I managed to get the single
sign out working with Spring Security and everything seems to work fine
(sessions are invalidated). However we do have a certain amount of
custom code for each application when the user logs out (for instance
logging the action etc.) but I do not find a way to add extra logout
handlers.

So the question is is there a way to extend the filter somehow (the
SingleSignOutFilter class is final, I cannot overwrite it) or add
custom logout handlers ?

Thanks !
Nonak



________________________________

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas



      
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to