Re: [cas-user] How CAS protect server side API in separate apps?

2016-10-21 Thread Ray Bon
Yan, If xyzservice needs to know who the user is, then clearpass is an option, https://apereo.github.io/cas/4.2.x/integration/ClearPass.html. Ray On 2016-10-20 09:28, Yan Zhou wrote: > > Hi > > > > We have CAS 4.1.x overlay. We have one webapp and one backend > services. Two different WAR

[cas-user] How CAS protect server side API in separate apps?

2016-10-20 Thread Yan Zhou
Hi We have CAS 4.1.x overlay. We have one webapp and one backend services. Two different WAR files, both apps are casified. Webapp runs at localhost:8080/myapp, backend service runs at localhost:8080/xyzservice (same domain). After user login successfully into /myapp, its