Commit Graph

321 Commits

Author SHA1 Message Date
Scott Battaglia ae37092100 CASC-228 URL Encode Paramaters Passed to Server via Validate
Problem: We currently don't pass encoded values to the server, possibly resolving in parsing/extraction errors.
Solution: URL Encode all values instead of just the service url.

QA Notes: Added unit test.
2014-06-24 18:44:45 -04:00
Scott fd962da5c4 Merge pull request #72 from battags/CASC-223
CASC-223 Backwards Compatibility for Initializing Sign Out Handler in Filter
2014-05-22 22:03:26 -04:00
Scott Battaglia 795506f22b Removed no-longer valid test. 2014-05-06 23:17:32 -04:00
Scott Battaglia cacc85c513 Synchronize the init method in case we have multiple concurrent requests at the same time. 2014-05-06 22:53:05 -04:00
Scott Battaglia db4057815a CASC-223 SingleSignOutFilter requires init method to be called which changes the contract with previous versions
Problem: Some clients such as Spring Security configure the filter via Spring configuration, meaning the handler's init method
is not called vai the Filter#init method.

Solution: For now, have an atomic boolean to determine if init was called or not and call it if necessary as part of the flow.
2014-05-06 22:35:55 -04:00
Scott Battaglia b59df9a661 CASC-224 Public API Method Removed without Deprecation
Problem: Previous versions of the CAS Client remove a public API method without sufficient deprecation time resulting in
problems for clients who want to upgrade.

Solution: Add Method back and mark it as deprecated.
2014-05-06 22:12:59 -04:00
LELEU Jérôme 8abbc136aa Merge pull request #68 from leleuj/CASC-220
CASC-220: Support front channel SLO logout
2014-04-09 08:10:42 +02:00
Jérôme LELEU a838bb6c5d CASC-220: Support front channel SLO logout
Update after new Misagh's comments
2014-04-07 18:54:40 +02:00
LELEU Jerome c3ee8b07c9 CASC-220: Support front channel SLO logout
Updates after Marvin's code review
2014-04-01 16:46:19 +02:00
Jérôme LELEU e3cd32cd25 CASC-220: Support front channel SLO logout
Update after Scott's code review
2014-03-27 21:02:30 +01:00
Jérôme LELEU f5c47b857b CASC-220: Support front channel SLO logout
Updates after Misagh's code review
2014-03-21 14:10:33 +01:00
Scott Battaglia 53130b9c34 [maven-release-plugin] prepare for next development iteration 2014-03-19 20:55:47 -04:00
Scott Battaglia 6c34fa929f [maven-release-plugin] prepare release cas-client-3.3.1 2014-03-19 20:55:38 -04:00
Scott Battaglia da00f51d39 Added in missing license header. 2014-03-18 19:26:45 -04:00
unknown 33d39be658 Merge remote-tracking branch 'upstream/master' into CASC-220 2014-03-18 08:16:29 +01:00
Misagh Moayyed 0d83afcc97 Merge pull request #67 from battags/CASC-214
CASC-214 Improve Service Url Construction to Add Non-Standard Ports
2014-03-17 09:15:29 -07:00
Misagh Moayyed fde7858cca CASC-219: added final 2014-03-17 00:18:56 -07:00
LELEU Jerome 8d43caa0c9 CASC-220: Support front channel SLO logout
specific front logout parameter + Tomcat valves update
2014-03-14 10:52:42 +01:00
LELEU Jerome 23a4abe3cb CASC-220: Support front channel SLO logout
First commit
2014-03-13 19:03:41 +01:00
Misagh Moayyed 4237e24bc0 CASC-219: added exact-matcher strategy 2014-03-13 08:26:22 -07:00
Misagh Moayyed 05570e4d18 CASC-219: changed exact to contains 2014-03-13 03:20:39 -07:00
Misagh Moayyed e18232e238 CASC-219: renamed matcher class to match behavior 2014-03-12 07:37:59 -07:00
Misagh Moayyed df336da4de CASC-219: switched warn to error, fixed typo and this refs 2014-03-11 08:46:00 -07:00
Misagh Moayyed 2aa02e253f CASC-219: updated internal map to be a static ref instead 2014-03-11 07:11:53 -07:00
Misagh Moayyed 1089e3de89 CASC-219: allowed extensions for ignoring urls 2014-03-11 05:04:59 -07:00
Misagh Moayyed 0fd2dbd659 CASC-219: updated javadocs and added map to keep track of pattern matchers 2014-03-11 04:24:27 -07:00
Misagh Moayyed 8e256219da CASC-219: Cleaned up formatting issues 2014-03-10 05:22:44 -07:00
Scott Battaglia eec2d4ec51 Removed debug statements used to confirm private methods worked. 2014-03-09 23:18:14 -04:00
Scott Battaglia 1bcc4a1714 CASC-214 Improve Service Url Construction to Add Non-Standard Ports if Missing from Configuration
Problem: sometimes the port is missing from the configuration.  This generates the wrong service url.
Solution: Add the server port if the server configuration does not have one.
QA Notes: Added unit tests to confirm behavior (and old unit tests still pass)
2014-03-09 23:13:04 -04:00
Misagh Moayyed d62bf68eee CASC-219: Provide support for certain urls to be excluded from CAS filters. 2014-03-07 11:17:14 -07:00
Misagh Moayyed f55bae3b89 CASC-219: Provide support for certain urls to be excluded from CAS filters. 2014-03-07 01:52:50 -07:00
Misagh Moayyed 1b4af19d70 CAS-219: Provide support for certain urls to be excluded from CAS filters. 2014-03-02 03:03:24 -07:00
Misagh Moayyed 8b3ac7922d CAS-219: Provide support for certain urls to be excluded from CAS filters. 2014-02-27 22:02:19 -07:00
Scott Battaglia ce852a19a4 CASC-203 Properly Parse Response to Keep Line Breaks
Problem: The CAS Client uses a buffer reader which strips out the returned line breaks.
Solution: Switch to a normal input stream reader and add appropriate test.
2014-02-17 23:09:32 -05:00
Scott Battaglia 1e89580a6f [maven-release-plugin] prepare for next development iteration 2014-01-07 21:15:06 -05:00
Scott Battaglia 2bf3129d04 [maven-release-plugin] prepare release v3.3.0 2014-01-07 20:37:19 -05:00
Scott Battaglia e2aefd72b1 Added generated notice files 2014-01-07 20:00:30 -05:00
Scott Battaglia cb2957a1e2 Fixed license files 2014-01-05 23:04:03 -05:00
Scott Battaglia 427c2721e9 Added missing license headers 2014-01-05 22:53:17 -05:00
Scott Battaglia 5e553c208c [maven-release-plugin] rollback the release of v3.3.0 2014-01-05 22:06:46 -05:00
Marvin S. Addison 92fbf3fcc0 Put HttpServletRequest#logout() in separate try/catch block. 2013-10-28 16:07:28 -04:00
Marvin S. Addison e494ac5cf6 Respond to code review feedback.
1. Call HttpServletRequest#logout() on SLO callback since it is available.
2. Use final for local variables where possible.
2013-10-28 15:58:40 -04:00
Marvin S. Addison f7343e5cb2 Remove cached assertions on logout to prevent credential replay attack. 2013-10-24 12:57:25 -04:00
Marvin S. Addison 8c8db86056 CASC-174 Remove @version javadoc tag. 2013-08-15 11:05:32 -04:00
Marvin S. Addison 0e3837e765 CASC-174 Remove JBoss verbiage from error message. 2013-08-01 14:10:38 -04:00
Marvin S. Addison 31564c692e CASC-174 Provide facility for Servlet 3.0 programmatic JAAS login.
Servlet3AuthenticationFilter supersede the JBoss-specific
WebAuthenticationFilter for JBoss 7. It should also provide support for
programmatic JAAS login for any container that is Servlet 3.0/JEE6
compliant.
2013-08-01 14:05:01 -04:00
Scott e3aeeea78e Merge pull request #52 from battags/CASC-211
CASC-211 Better Ticket Validation Error Logic
2013-06-20 16:31:59 -07:00
Scott Battaglia 9a4275ee55 Renamed arguments 2013-06-20 19:28:35 -04:00
Scott Battaglia 4bcc71fa0d Switched to SaxParserFactory directly. Unit tests pass. CASC-212 2013-06-20 00:15:53 -04:00
Scott Battaglia 99494fe0b7 Fixed formatting again. 2013-06-19 23:16:17 -04:00