Le 03/05/2010 01:23, Encolpe Degoute a écrit :
> Le 27/04/2010 16:25, Wouter Vanden Hove a écrit :
>> Hello,
>>
>> You are listed on Pypi as package-owner for Products.CAS4PAS
>> Can one of you make a new release of Products.CAS4PAS?
>>   
> 
> Hello,
> Releases 2.1 for Products.CAS4PAS and 1.1 for collective.castle are done.
> As I take ownership of these packages recently I don't have history for
> tickets or patches proposed to Derek.
> 
> There is already at least one fork : collective.cas4plone and a specific
> branch collective.castle/branches/properlogout.
> 

This branch is the some i told i have made to enable a proper logout.
I made that because you told me you were making changes, and i wanted to have
stable code for my needs. Feel free to merge it (as i already told to you).

Actually you are not really loggued out from CAS when you call logout (because
the cas logout URL is not called from plone).
IE , when you click 'login' again, you are loggued with the same user
automaticly without credentials confirmation. With this fix, it asks for your
credentials again fixing a possible security break.

This is pretty important in self service offices where computers are accessibles
by many users, one log out from its session, the other one takes the computer
and steal the other one session ...

I addded also an i18n factory and reworked the code a little the code to make it
clearer also.

> Regards,
> 

-- 
Cordialement,
KiOrKY
GPG Key FingerPrint: 0x1A1194B7681112AF

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Product-Developers mailing list
[email protected]
http://lists.plone.org/mailman/listinfo/product-developers

Reply via email to