[Acegisecurity-developer] How know password authenticated by CAS

2007-02-20 Thread mario.buonopane
Is there a secure way to know the password used by cas to authenticate the user? I'm extending org.acegisecurity.ui.cas.CasProcessingFilter and in method onSuccessfulAuthentication I need to know the password. Thanks in advance Mario Buonopane This message is for the d

Re: [Acegisecurity-developer] How know password authenticated by CAS

2007-02-20 Thread Scott Battaglia
CAS does not return the password to the client application. If you need to authenticate the user against another application or service, you should probably use the proxying capabilities of CAS. -Scott [EMAIL PROTECTED] wrote: > Is there a secure way to know the password used by cas to authent

Re: [Acegisecurity-developer] How know password authenticated by CAS

2007-02-20 Thread mario.buonopane
Thanks Scott, is there a way to force cas re-authentication in onSuccessfulAuthentication method if some condition is verified? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Battaglia Sent: 20 febbraio 2007 13.40 To: acegisecurity-developer@lists.s

[Acegisecurity-developer] Bypass SavedRequestAwareWrapper?

2007-02-20 Thread Jeoff Wilks
Is there any way to disable or bypass SavedRequestAwareWrapper? I have run into bug SEC-363, and I need the quickest possible workaround. I'm wondering if it's possible to just turn off "saving the request" and either (1) always redirect to the home page, or (2) pass in the desired redirect URL a

Re: [Acegisecurity-developer] Bypass SavedRequestAwareWrapper?

2007-02-20 Thread Jeoff Wilks
I added a test case to SEC-363 to reproduce the bug using the contacts filter sample. Will someone please reopen it? Thanks. On 2/20/07, Jeoff Wilks <[EMAIL PROTECTED]> wrote: > Is there any way to disable or bypass SavedRequestAwareWrapper? > > I have run into bug SEC-363, and I need the quickes