Re: [cas-user] Re: lose service parameter when incorrect credential entered

2019-02-07 Thread Ray Bon
Yan, Use your browser development tools to see if there is an unexpected redirect. If there is, that would be where the service param is lost. The service is part of the url and not a form variable. Ray On Thu, 2019-02-07 at 16:04 -0800, Yan Zhou wrote: Thanks for reading through such long logs

Re: [cas-user] Re: lose service parameter when incorrect credential entered

2019-02-07 Thread Yan Zhou
Thanks for reading through such long logs. I appreciate it! I am getting closer. With the one missing service parameter, it is because when the login form submits, it is missing service parameter to begin with. CAS code confirmed the behavior. the FORM POST did not have service parameter to be

Re: [cas-user] Re: lose service parameter when incorrect credential entered

2019-02-07 Thread Ray Bon
Yan, In the preserved parameter log, checkForPswdResetToken exists between initializeLoginForm and viewLoginForm. It is missing in yours. Ray On Thu, 2019-02-07 at 12:04 -0800, Yan Zhou wrote: Hi, thanks for the help, I have not used the customized webflow class Ray provided, because I do not

[cas-user] Re: lose service parameter when incorrect credential entered

2019-02-07 Thread Yan Zhou
Hi, thanks for the help, I have not used the customized webflow class Ray provided, because I do not know how to yet. I was looking into this by comparing debug level logging. What I did is to compare the two projects, one is a simple cas5.3.x overlay and the other is mine (after removing a

[cas-user] Re: JWT token OAuth

2019-02-07 Thread Lorenzo Di Cola
Hi Andy, First of all thank you very much for you fast reply. Unfortunately I can confirm that generate the JWT token after the OAuth authentication is not possible. I tried with your suggested configuration too but without none results. I already customized my CAS instance in order to let CAS ab

[cas-user] Re: CAS 5.3.7 Issue Pac4J OIDC + SAML2 Delegation

2019-02-07 Thread Andy Ng
Hi Kyra, > I'm not sure the problem is the OIDC authentication protocol. The problem could be in any component, so you will need to look into all of them. I suggest it might be OIDC only because of my suspection, I don't actually have solid reason to support myself.. As for the log, The tom

[cas-user] Re: JWT token OAuth

2019-02-07 Thread Andy Ng
Hello, Pretty sure it is not possible without modifying CAS code, The logic for generating OAuth/OpenID Authentication is here: 1. https://github.com/apereo/cas/blob/v6.0.1/support/cas-server-support-oauth-core/src/main/java/org/apereo/cas/ticket/accesstoken/DefaultAccessTokenFactory.java#L43 2.

[cas-user] JWT token OAuth

2019-02-07 Thread Lorenzo Di Cola
Hi all, I'm working with CAS 5.3.7 and I enabled the OAuth/OpenID Authentication [1]. I'm calling the endpoint /oauth2.0/accessToken with the Resource Owner Credentials [2]. I would like to have an access token in JWT format after this call. Is it possible to have the JWT token during the OAut

[cas-user] Re: CAS 5.3.7 Issue Pac4J OIDC + SAML2 Delegation

2019-02-07 Thread kyra1510
When I wrote service, I mean myService (the redirect_uri). Sorry for the trouble Le mercredi 6 février 2019 08:56:47 UTC+1, kyra1510 a écrit : > > Hy all, > > I apologize for my French English. > > I have a problem when I upgrade my CAS 5.2.x to CAS 5.3.7 with the SAML > delegation. > My Cas 5.3

[cas-user] Re: CAS 5.3.7 Issue Pac4J OIDC + SAML2 Delegation

2019-02-07 Thread kyra1510
Hi Andy, Thanks for looking my problem. I'm not sure the problem is the OIDC authentication protocol. Here are my tomcat logs (I anonymise my logs): The IDP OIDC is the CAS 5.3.7 OIDC and the IDP SAML2 is the IDP where I delegate the authentication *LOG tomcat about the authentication OIDC wit

[cas-user] Re: CAS 5.3.7 Issue Pac4J OIDC + SAML2 Delegation

2019-02-07 Thread kyra1510
Hi Andy, Thanks for looking my problem. I'm not sure the problem is the OIDC authentication protocol. Here are my tomcat logs (I anonymise my logs): The IDP OIDC is the CAS 5.3.7 OIDC and the IDP SAML2 is the IDP where I delegate the authentication *LOG tomcat about the authentication OIDC wit

[cas-user] Re: CAS 5.3.7 Issue Pac4J OIDC + SAML2 Delegation

2019-02-07 Thread kyra1510
Hi Andy, Thanks for looking my problem. I don't believe the problem here concern the OIDC authentication because without delegation everything is working fine. The problem occured when the IDP SAML2 send the response to continue the workflow OIDC. I add my tomcat logs: [07/Feb/2019:09:32:27 +01