Yes , we custom following method (Not limited to API): 1) remove the spring web-flow support and use spring mvc directly. Reason: spring web-flow base on httpsession, that reduces scalability(Done stress tests). For SSO only, we based TGT cookie and make the entire login process stateless. So, we didn't use cas-webapp, and implmention by spring mvc+ freemarker. 2) SessionStorage is my most valued characteristics, we have achieved the realization based on memcached. The implemention allows a user only to hold one TGT cookie(Our business needs). 3) JCaptcha support Using AuthenticationHandler and AuthenticationResponsePlugin to achieve. And the verification code displayed after N time errors. 4) CredentialToPrincipalResolver implemention to resolve and return attributes by settings of RegisteredService.allowedAttributes.
Honestly , I think a more rational design of fauture-cas4api. A lot of the interface and the way to change , this is a challenge for us. Anyway, I hope that the CAS has a good future. THX ------------------ ???????? ------------------ ??????: "scott.battaglia"<[email protected]>; ????????: 2012??10??26??(??????) ????12:00 ??????: "cas-dev"<[email protected]>; ????: [cas-dev] Re: [cas-dev] ?????? [cas-dev] The choice: feature-cas4api vs 4.0-snapshot ? Were there any APIs you were specifically coding against? On Thu, Oct 25, 2012 at 12:59 PM, ???? <[email protected]> wrote: Thank you for your reply! My understanding is that we should switch to the master up . Waiting for the news you release the RC version. Thank you for the great work! ------------------ ???????? ------------------ ??????: "scott.battaglia"<[email protected]>; ????????: 2012??10??25??(??????) ????8:00 ??????: "cas-dev"<[email protected]>; ????: Re: [cas-dev] The choice: feature-cas4api vs 4.0-snapshot ? "master" is what is marching to CAS4. We'll be porting over the interfaces/features that make sense. I know Marvin had worked on migrating over the newer Authentication APIs. On Thu, Oct 25, 2012 at 2:56 AM, ???? <[email protected]> wrote: hi guys! Anyone know the branch of feature-cas4api is not longer developed ? ------------------ ???????? ------------------ Who can point out the differences between the feature-cas4api and Master(4.0-snapshot) ? Two years ago we had based feature-cas4api to development, but currently see 4.0-snapshot is different(which continues 3.x route). What shall we do? Continue use feature-cas4api or switch to master (4.0-snapshot) ? -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
