0.1 Add dependency to gradle file under dependencies -> implementation "org.apereo.cas:cas-server-support-json-service-registry:${project.'cas.version'}"
0.2 Clean build CAS
- Create a json file
- Add data to that json file (from documentation)
- Add/replace that json file to your /etc/cas/services folder ( gradlew copyCasConfiguration does not copy it )
- In your cas.properties file check that cas.serviceRegistry.json.location is pointing toward that folder where the json is ( in my case file:/etc/cas/services)
- Also in cas.properties put cas.serviceRegistry.initFromJson=true .
- gradlew copyCasConfiguration
- run CAS
cas.ticket.registry.jpa.password=test123$
cas.ticket.registry.jpa.driverClass=com.microsoft.sqlserver.jdbc.SQLServerDriver
cas.ticket.registry.jpa.url=jdbc:sqlserver://10.10.1.40
cas.ticket.registry.jpa.dialect=org.hibernate.dialect.SQLServer2012Dialect
cas.ticket.registry.jpa.failFastTimeout=1
cas.ticket.registry.jpa.healthQuery=SELECT 1
cas.ticket.registry.jpa.isolateInternalQueries=false
cas.ticket.registry.jpa.leakThreshold=10
cas.ticket.registry.jpa.batchSize=100
cas.ticket.registry.jpa.ddlAuto=update
cas.ticket.registry.jpa.defaultSchema=portaldb
cas.ticket.registry.jpa.ticketLockType=NONE
cas.ticket.registry.jpa.jpaLockingTimeout=3600
Hi all, we are currently using CAS 5.3.14 and facing the issue that our implementation of
org.apereo.services.persondir.IPersonAttributeDaois called on every creation of a ProxyGrantingTicket. For me it looks likeorg.apereo.cas.audit.AuditableExecution.execute(AuditableContext)leads toorg.apereo.cas.authentication.principal.cache.AbstractPrincipalAttributesRepository.retrievePersonAttributesToPrincipalAttributes(String)which is called for any service url. Is this the intended behavior?
Any comments on that? We are still facing the issue...
FAILURE: Build failed with an exception.
Where:
Build file '/root/cas-6.1.x/build.gradle' line: 46What went wrong:
A problem occurred evaluating root project 'cas-server'.Could not get unknown property 'cas.version' for root project 'cas-server' of type org.gradle.api.Project.
I added ldap and keycloak via
org.apereo.cas:cas-server-support-openid-webflow:${project.'cas.version'} and org.apereo.cas:cas-server-support-ldap:${project.'cas.version'}. That works. But as soon as I add org.apereo.cas:cas-server-support-oauth-webflow:${project.'cas.version'} to add OAuth communication for my client, this breaks keycloak (and any other pac4j service, like Google OAuth). Anyone ever heard of this?
Hi! I want to logout user from CAS using REST endpoint. My users log in using OAuth2 so I created method which clear ticket registry:
private boolean ticketMatchesToSsoId(String ssoId, Ticket ticket) {
Authentication auth = null;
if (ticket instanceof TicketGrantingTicket) {
auth = ((TicketGrantingTicket) ticket).getAuthentication();
} else if (ticket instanceof OAuthToken) {
auth = ((OAuthToken) ticket).getAuthentication();
}
if (auth != null) {
Map<String, Object> ticketsPrincipalAttributes = auth.getPrincipal().getAttributes();
return attributesMatch(ticketsPrincipalAttributes, ssoId);
}
return false;
}But this solution does not work. Maybe I can call internal CAS method which do all things for me?
Hoping someone can help me figure out how to modify the CAS protocol response for service Validate endpoint example:
<cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas">
<cas:authenticationSuccess>
<cas:user>username</cas:user>
</cas:authenticationSuccess>
</cas:serviceResponse>I want to change which cas attribute gets used for the username based on the service and add some of the other attributes in the response as well. Any ideas?
@CardoKambla I am using CAS 6.1.3 I get the exception:org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing org.apereo.cas.web.flow.DelegatedClientAuthenticationAction@18c4c2b in state 'delegatedAuthenticationAction' of flow 'login' -- action execution attributes were 'map[[empty]]'
[...]
Caused by: org.pac4j.core.exception.TechnicalException: State parameter is different from the one sent in authentication request. Session expired or possible threat of cross-site request forgery This is thrown in the OidcExtractor on line 68, because the context.getSessionStore() is empty.
I set logging level debug for pac4j, this is what I get right before the exception:2020-01-15 08:08:34,801 DEBUG [org.pac4j.oidc.redirect.OidcRedirectionActionBuilder] - <Authentication request url: https://url.com/auth/realms/xyz/protocol/openid-connect/auth?scope=openid+profile+email&response_type=code&redirect_uri=redir_uri&state=TST-1-abc&nonce=myNonce&client_id=client>
2020-01-15 08:08:40,959 DEBUG [org.pac4j.oidc.credentials.extractor.OidcExtractor] - <Authentication response successful>
2020-01-15 08:08:40,970 ERROR [org.springframework.boot.web.servlet.support.ErrorPageFilter] - <Forwarding to error page from request [/login] due to exception [Exception thrown executing org.apereo.cas.web.flow.DelegatedClientAuthenticationAction@36a20854 in state 'delegatedAuthenticationAction'... (see above)
The authentication itself works, but on redirect, the session isn't recognized (even though the session cookie in the browser).
When I use cas-server-support-pac4j-webflow without cas-server-support-oauth-webflow it works fine, so it's not a misconfiguration (I guess). In the code above I am using keycloak, but when setting up Google, I get the same behavior.
@Slf4j
@Controller("profileController")
@RequestMapping
public class ProfileController {
@Autowired
private TicketRegistrySupport ticketRegistrySupport;
@GetMapping("/user")
@PreAuthorize("isAuthenticated()")
public String user(Model model, Principal principal) {
// This is not working
// model.addAttribute("principal", principal);
return "shipUserProfile";
}}
Can some one tell me how to add an class and call my REST Webservice endpointfor please ? I have cas 5.1 from https://github.com/icoundoul/cas-overlay-template
