Skip to content

Instantly share code, notes, and snippets.

@dannyduc

dannyduc/casProxy.txt

Last active December 21, 2015 05:19
Show Gist options
  • Save dannyduc/6255667 to your computer and use it in GitHub Desktop.
Save dannyduc/6255667 to your computer and use it in GitHub Desktop.
Download ZIP
Notes on JASIG CAS proxy granting ticket protocol
Raw
casProxy.txt
CasProcessingFilterEntryPoint
redirect to cas for authentication with service url callback on success.
https://service.com/service/j_spring_cas_security_check
Cas20ServiceTicketValidator
listen for request to /j_spring_cas_security_check
1 read parameter ticket=serviceTicket
2 post validate ticket to cas along with pgt call back url (/j_spring_cas_security_proxyreceptor)
5 read pgtIou from response and load pgt from ProxyGrantingTicketStorage
6 saves pgt and ProxyRetriever to principal session wrapped in CasAuthenticationToken
ProxyGrantingTicketStorage
CasProcessingFilter
listen for request to /j_spring_cas_security_proxyreceptor
3 read pgtIou and pgt parameter and saves to ProxyGrantingTicketStorage
4 write success response
AttributePrincipal#retrieveProxyTicket(service)
Use serviceTicket to make proxy request on user's behalf
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment