Hi,

An early implementation had the CAS callbacks coming in on a separate
service URL but it ended up requiring additional unnecessary redirects.
 For login, this meant having the standard
FormsAuthentication.RedirectToLoginPage() redirect to a handler/page on
your server with the original page URL encoded in a querystring parameter
rather.  The current implementation has it redirect directly to the CAS
login screen with the callbacks from CAS coming in on the page that
initiated the security check.

The CasAuthenticationModule is able to detect the special querystring
arguments and short circuits the request pipeline to do whatever needs to
get done.  While the proxy process isn't mechanically the same as the login
process in terms of the redirection, it was easier to follow that
convention.

While it's definitely possible to have the callbacks coming in on a
specific service-type URL, I don't know that the value add is worth the
effort required (unless I'm missing something).  Your code should never
need to worry about the CAS-related querystring parameters and your handler
(ashx/page/controller) should never execute with the CAS artifacts in the
URL.

-Scott

On Fri, Mar 2, 2012 at 9:45 AM, Misagh Moayyed <[email protected]> wrote:

> Folks,****
>
> ** **
>
> While reviewing the code the CAS .NET client, I realized the library does
> not have support for proxy callback urls while the Java client does so. I
> am curious, is threre a particular reason that the setting was not
> implemented?****
>
> I certainly could provide a patch or a pull request if the library is now
> available on Github. ****
>
> ** **
>
> Regards,****
>
> ** **
>
> *-Misagh**
>
> *
>
> ** **
>
> --
> You are currently subscribed to [email protected] as: 
> [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-dev
>
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to