The only way you can do anything is if the browser handles the the url
(which is why /login generates a CAS ticket).

-Scott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia


On Fri, Jan 9, 2009 at 11:56 AM, Keith Garry Boyce <[email protected]>wrote:

>  What CAS implementation classes would I have to change to allow this?
> Basically I suppose it would be a url like /cas/issueCookie?ticket=xyz
>
> Also what would be the security risks involved in allowing this to be
> possible?
>
>  ------------------------------
> *From:* [email protected] [mailto:[email protected]] *On
> Behalf Of *Scott Battaglia
> *Sent:* Friday, January 09, 2009 12:38 PM
> *To:* Yale CAS mailing list
> *Subject:* Re: Is it possible to return SSO cookie using ticket generated
> usingRestful Api?
>
> You can't.  They are mutually exclusive.
>
> -Scott
>
> -Scott Battaglia
> PGP Public Key Id: 0x383733AA
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
>
>
> On Fri, Jan 9, 2009 at 10:48 AM, Keith Garry Boyce 
> <[email protected]>wrote:
>
>>
>>
>> > I followed instructions at
>> > http://www.ja-sig.org/wiki/display/CASUM/RESTful+API to communicate
>> with
>> > CAS using restful API..
>> > Once I've logged in via that method I also require participation in CAS
>> > SSO. How can I get CAS to issue me a cookie if I've already logged in
>> via
>> > restful API?
>> >
>> > Thanks,
>> > Garry
>>
>> _______________________________________________
>> Yale CAS mailing list
>> [email protected]
>> http://tp.its.yale.edu/mailman/listinfo/cas
>>
>>
>
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to