[cas-user] CAS OIDC: Configure different scope with different claims

Hello all, I have configured CAS 5.3.6 with protocol OpenId Connect protocol for authentication. Issue 1: Each scope should map to at least one or more claims. Right now it doesn’t matter which scope is chosen, always same set of claims is returned. Even if you provide no claims at all it still wo

[cas-user] Config error with property 'cas.authn.oidc.idTokenSigningAlgValuesSupported'

Hello all, I am testing 'JWT as Service Ticket' with a alg 'RS512' which is not default. But when I try to confgure it CAS 5.3.4 throws below error on startup: Failed to bind 'cas.authn.oidc.idTokenSigningAlgValuesSupported' from 'applicationProfilesProperties' to 'authn.oidc.idTokenSigningAlgVal

[cas-user] Re: Exposing public key via url for 'JWT as Service Tickets'

Hello all, Any idea will be welcomed ! Thanks, -D On Fri, Dec 21, 2018 at 10:45 AM Devendra Sisodia < devendra.siso...@gmail.com> wrote: > Hello all, > I am configuring JWT as Service Ticket and have used RSA public/private > keys to sign/verify it. > As convince for the

[cas-user] Exposing public key via url for 'JWT as Service Tickets'

Hello all, I am configuring JWT as Service Ticket and have used RSA public/private keys to sign/verify it. As convince for the consumers of JWT I want to expose public key via a url. Does cas provide a way to do so ? Thanks, Devendra -- - Website: https://apereo.github.io/cas - Gitter Chatroom:

Re: [cas-user] Re: JWT without encryption key

Giuseppe Infurna >> wrote: >> >>> >>> i'm using io.jsonwebtoken.jjwt library >>> >>> Jwts.parser().setSigningKey().parseClaimsJws(); >>> >>> >>> >>> Il giorno venerdì 14 dicembre 2018 14:02:14 UTC+1, Devendr

Re: [cas-user] Re: JWT without encryption key

> > Il giorno venerdì 14 dicembre 2018 14:02:14 UTC+1, Devendra Sisodia ha > scritto: >> >> Hello, >> >> Big Thanks for sharing configuration and as a result JWT is not encrypted >> and only signed. >> >> But now I face strange issue. when I t

Re: [cas-user] Re: JWT without encryption key

> "@class" : > "org.jasig.cas.services.DefaultRegisteredServiceAccessStrategy", > "enabled" : true, > "ssoEnabled" : true > }, > "proxyPolicy" : { > "@class" : > "org.jasig.cas.services.RegexMatc

Re: [cas-user] Re: JWT without encryption key

Sorry, but this does not work. How's your service(one with definition of 'jwtAsServiceTicket', etc) looks like ? On Thu, Dec 13, 2018 at 2:09 PM Giuseppe Infurna wrote: > Hi all, > I'm work fine with > > cas.authn.token.crypto.encryption-enabled=false > cas.authn.token.crypto.encryption.key= >

Re: [cas-user] Re: JWT without encryption key

, 2018 at 12:45 PM Devendra Sisodia < devendra.siso...@gmail.com> wrote: > Hello Xavier, all, > > I too have similar requirement of JWT without encryption and wondering if > there exists any solution. > > Regards, > Devendra > On Monday, November 12, 2018 at 4:44:10 PM

[cas-user] Re: JWT without encryption key

Hello Xavier, all, I too have similar requirement of JWT without encryption and wondering if there exists any solution. Regards, Devendra On Monday, November 12, 2018 at 4:44:10 PM UTC+1, Xavier Rodríguez wrote: > > I'm configuring Cas Server 5.3.3. In one service I need to response a JWT > wi