Sorry, didn't realize we hadn't posted our filter, which goes in application_controller.rb:

  before_filter :post_CAS_filter

  def post_CAS_filter
    if (cas_user = session[:cas_user])
      if ( user = User.find_by_email_address(cas_user) )
        session[:user] = user.typed_id
        @current_user = user
      else
        redirect_to "#{base_url}/front/unauthorized"
      end
    end
  end


SeanMcTex wrote:
Hi folks,

I'm just getting my feet wet with Hobo, and am very favorably
impressed with how much solid functionality it provides.

For my learning project, I need to integrate Hobo with a CAS single
sign-on system. In an earlier post, Bryan Larsen indicated that he had
done this simply by following the instructions for the rubycas-client
gem. I've tried this, and sure enough, it goes to our CAS server and
allows me to authenticate myself there and then passes me back.

But at this point, the hobo app has no inkling about my login -- it
still shows me as unauthenticated until I log in with my hobo
credentials. I'm guessing I need to override some aspect of the
hobo_user_controller to get it to pay attention to session[:cas_user],
but I'm a bit at a loss on how to do that. (I'd still like to use
Hobo's user models for authorization, so that I can define who has
access and is an admin locally.) Any pointers on what direction to go
with this would be very welcome!

Thanks,
Sean


-- 
You received this message because you are subscribed to the Google Groups "Hobo 
Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/hobousers?hl=en.


Reply via email to