Sorry, I meant to respond to Jérôme with the message below.


To answer your question, you need to establish an authn session with GET
request first before doing anything posts.



From: Misagh Moayyed [mailto:mmoay...@unicon.net]
Sent: Tuesday, September 15, 2015 8:41 AM
To: cas-user@lists.jasig.org
Subject: RE: [cas-user] Validating Service Tickets in POST requests -
Securing WS



Possible bug. Try adding:



<meta name="viewport" content="width=device-width, initial-scale=1">



to the html tag and test on the device. Post back results please.



From: Manfredo Hopp [mailto:mhopp.coni...@gmail.com]
Sent: Tuesday, September 15, 2015 7:58 AM
To: cas-user@lists.jasig.org <mailto:cas-user@lists.jasig.org>
Subject: [cas-user] Validating Service Tickets in POST requests - Securing
WS



Hi,





we are trying to  secure some of our Web Services with Cas, generating a
Service Ticket for each access with a Jersey client.



There is no problem with GET requests since Service Ticket is validated
from QueryParameter, but with POST requests this is not possible, since
there are no QueryParameters.



Is this approach correct or should we go other way round?



Thank you Manfredo




--
You are currently subscribed to cas-user@lists.jasig.org
<mailto:cas-user@lists.jasig.org>  as: mmoay...@unicon.net
<mailto:mmoay...@unicon.net>
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user

--
You are currently subscribed to cas-user@lists.jasig.org
<mailto:cas-user@lists.jasig.org>  as: mmoay...@unicon.net
<mailto:mmoay...@unicon.net>
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to