[cas-user] Re: CAS 5.2.3 -support for XSS protection

Hi Chava, Ops, guess I misunderstand your question then. Cool that your code worked! Cheers! - Andy -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this

[cas-user] CAS 5.3.3 delegated auth to CAS breaks SAML IdP

I'm trying to configure CAS 5.3.3 as a SAML IdP. That part seems to work, but I want it to delegate authentication to an existing CAS server, but doing that it forgets to reply to the SP in SAML, and instead sends a CAS service ticket. Before the CAS/IdP has a session for the user it breaks, fo

[cas-user] Re: CAS 5.2.3 -support for XSS protection

Hi Andy, These settings for setting http response and by default they are enabled. I was looking for stripping off the xss script code from http request params and headers. Here is what I did and seems working fine. I've created XSSFilter and added it to FilterChain by using below code. My im

Re: [cas-user] Simple example for .Net Cas Client

Hi Jerome! I looked at your example and understand how cas client run. Thanks so much dude! On Wednesday, October 3, 2018 at 9:50:24 PM UTC+7, leleuj wrote: > > Hi, > > It certainly does. New versions of the CAS server remain backward > compatible regarding the CAS protocol, so old CAS protocol e

Re: [cas-user] Simple example for .Net Cas Client

Hi, It certainly does. New versions of the CAS server remain backward compatible regarding the CAS protocol, so old CAS protocol endpoints still exist. Thanks. Best regards, Jérôme On Wed, Oct 3, 2018 at 4:46 PM Hoang Anh Duc wrote: > Hi! > Thanks so much but I don't know it can work with CAS

Re: [cas-user] Simple example for .Net Cas Client

Hi! Thanks so much but I don't know it can work with CAS 5.x :( Do you know? Thanks! On Wednesday, October 3, 2018 at 9:36:00 PM UTC+7, leleuj wrote: > > Hi, > > I have an old .Net CAS client example, it's outdated, but it might prove > useful: https://github.com/casinthecloud/dotnet-cas-client-

Re: [cas-user] Simple example for .Net Cas Client

Hi, I have an old .Net CAS client example, it's outdated, but it might prove useful: https://github.com/casinthecloud/dotnet-cas-client-demo Thanks. Best regards, Jérôme On Wed, Oct 3, 2018 at 4:28 PM Hoang Anh Duc wrote: > Hi! > I'm try to doing authentication with CAS server using .Net C#. B

[cas-user] Simple example for .Net Cas Client

Hi! I'm try to doing authentication with CAS server using .Net C#. But the example from github is quite difficult to understand. Anyone have a simple example, so that I can do my work following it? Thanks so much! -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/a

[cas-user] Deployiment error on Wildfly 14.0.1- CAS 5.3.3

Hi, I'm trying to deploy cas 5.3.3 overlay template with Wildfly 14.0.1 but I'm always having errors. I excluded embedded tomcat and changed the app.server to blank. Deployment fails with following error: 14:58:14,539 ERROR [org.springframework.boot.SpringApplication] (ServerService Thread

Re: [cas-user] CAS Proxy

The use of public key in service configuration is not related to a client web browser connecting to your CAS server over https. CAS requires the use public/private keys when releasing sensitive information as part of the returned attributes. The proxy service is one such case due to the option to r

[cas-user] Re: CAS 5.2.3 -support for XSS protection

Hi Chava, See if these properties are what you after? https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#http-web-requests Also, for what each properties does what, you can reference the source code here: [ https://github.com/apereo/cas/blob/5.2.x/core/cas-server-co