[cas-user] Force user to authenticate

2020-05-28 Thread Guillaume N.
Hello, I'm using CAS to create a new OIDC webflow for my business uses. What I want is to force users to authenticate on every services. Instead of customize every service configuration (e.g. ssoEnabled=false) I want to do it globally. I saw other discussions on this topic on this mailing

[cas-user] What is sign key for JWT in CAS OAuth2?

2020-05-28 Thread dg
I have configured CAS with OAuth2 and JWT as access token like this; https://apereo.github.io/2019/02/19/cas61-as-oauth-authz-server/ it works well and it returns jwt, and also i decode it in jwt.io website and i can see payload. *but i cant validate JWT in resource server. i have same signing

Re: [cas-user] What is sign key for JWT in CAS OAuth2?

2020-05-28 Thread Nguyen Tran Thanh Lam
Hi When you enable Oauth2, the signing key show in your logs when you build CAS. Don't worry about CAS build fail. You can get signing key and build again, it will success. Note: Oauth2 just support in CAS version 6.1.x BRs Vào 22:00, T.5, 28 Th5, 2020 dg đã viết: > I have configured CAS with

[cas-user] Re: What is sign key for JWT in CAS OAuth2?

2020-05-28 Thread dg
hi, thanks for response. i am little confused. does cas generate an sign key automatically even if I have set the sign key? here is my logs 2020-05-28 19:05:54,024 INFO [org.apereo.cas.util.CoreTicketUtils] - 2020-05-28 19:05:54,082 INFO [org.apereo.cas.util.cipher.BaseStringCipherExecutor]

[cas-user] OAuth Callback Redirect Issue - Browser Prefetch Conflict

2020-05-28 Thread Justin Isenhour
All, I am currently running CAS 5.3.7 in production and have gotten a few reports from users that if they already have an SSO session and attempt to go to one of our client app URLs directly they end up on our main SSO landing page instead of getting to the client app, all users so far have

Re: [cas-user] Re: What is sign key for JWT in CAS OAuth2?

2020-05-28 Thread Ray Bon
The field identifier, cas.authn.oauth.crypto.signing.key, is different than the one you have in your properties, cas.authn.oauth.access-token.crypto.signing.key. Perhaps both are needed. Ray On Thu, 2020-05-28 at 09:19 -0700, dg wrote: hi, thanks for response. i am little confused. does cas