[cas-user] Advice for getting user from database after OIDC delegated authentication login

2019-03-13 Thread Juan David Sánchez
Hi, I’m using Cas with OpenId Connect support. The authentication is deletaged to Azure Active Directory but I also have a user database (which regularly pulls users from the active directory) from which I would like to retrieve some user attributes after a sucessfull login in Azure. I wo

[cas-user] Re: Advice for getting user from database after OIDC delegated authentication login

2019-03-13 Thread Martin Bohun
Hi Juan, We (ALA) are doing exactly that with a custom AuthenticationHandler: https://github.com/AtlasOfLivingAustralia/ala-cas-2.0/blob/master/src/main/java/org/jasig/cas/support/pac4j/authentication/handler/support/ALAClientAuthenticationHandler.java#L99 Basically one of the "social media" OAut

Re: [cas-user] Re: interfacing CAS with angular 7 applications

2019-03-13 Thread Ian Wright
Yes it is browser client side and does authenticate the client side app against CAS without any server side interactions. What it also allows is, once you've auth'ed the client app, that you can use the bearer token to auth against a server side app as well. On Tuesday, 12 March 2019 22:39:46

Re: [cas-user] Nginx App Protected with CAS SSO

2019-03-13 Thread Pascal Rigaux
Hi, I have created a functional nginx-auth-cas-lua, quite simple and more similar to mod_auth_cas: https://github.com/prigaux/nginx-auth-cas-lua . It is not tested in production yet. But i do have nginx-lua in production for https://framagit.org/snippets/2820 . cu Pascal Rigaux a écrit 

Re: [cas-user] Re: Advice for getting user from database after OIDC delegated authentication login

2019-03-13 Thread juancho
Hello Martin, Thank you very much for sharing it. I'll have a look to undestand it and adapt it to my needs. Best regards, Juan On Wed, Mar 13, 2019 at 10:02 AM Martin Bohun wrote: > Hi Juan, > > We (ALA) are doing exactly that with a custom AuthenticationHandler: > > https://github.com/Atla

[cas-user] Re: CAS SSO with OpenID Connect and CAS protocol

2019-03-13 Thread Andy Ng
Yup. when you login using either CAS Protocol or OAuth/OpenID protocol it will login the other way too. - Andy -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You rece

[cas-user] Re: CAS 5.3.x, OpenID Connect, Getting 401 on token request

2019-03-13 Thread Andy Ng
Hello, Hmm that is very strange, I am still using CAS 5.3.x and POST working fine. I don't think trying for ID-token directly might not be what you want, since ID-token is different than the authentication code flow, so you are testing 2 things here. I do see that your POST is a bit strange,

[cas-user] Re: CAS ver >=6.0.0 is not working for 'TARGET' service parameter

2019-03-13 Thread mbar...@scad.edu
Robert, I am very new at this, but I have that functioning in a test environment using CAS deployed from the 6.0 branch of the cas-overlay-template. It's working to Ellucian's application navigator and admin common web applications. I added the following to the build.gradle compile "org.aper

Re: [cas-user] Re: CAS ver >=6.0.0 is not working for 'TARGET' service parameter

2019-03-13 Thread 'Robert Bond' via CAS Community
Dear Mike, You are the best. It worked! Not sure why I did not have to do this on previous versions of CAS. Thanks so much, this has been the last piece preventing me from going forward with a new deployment of cas using 6.1.0 RC2 You are seriously the best. How has your deployment of "Banner 9"

Re: [cas-user] Re: interfacing CAS with angular 7 applications

2019-03-13 Thread Trenton D. Adams
It sounds very much like it's open to an easy exploit, where an attacker just says "I'm person X, give me access", by overriding the javascript on the client side. Anything done in the browser cannot be trusted, especially when it comes to authentication. On 3/13/19 3:28 AM, Ian Wright wrote:

[cas-user] CAS 5.3.8 deployment on Wildfly 5.3.8 is succesfull but it makes the wildfly console logging to stop

2019-03-13 Thread P Shreyas Holla
Hi, CAS 5.3.8 deployment on Wildfly 5.3.8 is succesfull but it makes the wildfly console logging to stop with following logs, WFLYJCA0001: Bound data source [java:/jdbc/WSREGISTRY] IJ020018: Enabling for java:/DB2DSXA WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS] WFLYJCA0001

[cas-user] Re: CAS 5.3.8 deployment on Wildfly 5.3.8 is succesfull but it makes the wildfly console logging to stop

2019-03-13 Thread P Shreyas Holla
Correction : WIldFly version 10.0.0 FInal On Thursday, March 14, 2019 at 10:44:38 AM UTC+5:30, P Shreyas Holla wrote: > > Hi, > > CAS 5.3.8 deployment on Wildfly 5.3.8 is succesfull but it makes the > wildfly console logging to stop with following logs, > > WFLYJCA0001: Bound data source [java:/j