Commit Graph

387 Commits

Author SHA1 Message Date
Marvin S. Addison f9dfd6cf2f Add support for unique service principal.
Some JAAS frameworks (e.g. JBoss 5) may create an implicit principal from
username/password credentials passed into the JAAS pipeline. Since the CAS
service URL is used for the username part of the credential, support has
been added to append a unique suffix to the service URL and make it
available to the custom AssertionPrincpal princpal type.

A unqiue URL is generated prior to invoking WebAuthentication#login() to
account for this feature of JBoss 5.
2013-12-20 10:40:35 -05:00
Scott Battaglia bd2c35a38f Updated pom.xml file to jasig-parent-36 2013-12-17 17:35:43 -05:00
Scott 1dc468beb1 Merge pull request #58 from serac/jaas-logout-fix
Destroy cached assertions in CasLoginModule#logout() method
2013-11-12 16:34:27 -08:00
Marvin S. Addison 92fbf3fcc0 Put HttpServletRequest#logout() in separate try/catch block. 2013-10-28 16:07:28 -04:00
Marvin S. Addison e494ac5cf6 Respond to code review feedback.
1. Call HttpServletRequest#logout() on SLO callback since it is available.
2. Use final for local variables where possible.
2013-10-28 15:58:40 -04:00
Marvin S. Addison f7343e5cb2 Remove cached assertions on logout to prevent credential replay attack. 2013-10-24 12:57:25 -04:00
Scott 4231ac2936 Merge pull request #57 from h0nIg/memcachedclient
use memcached interface instead of implementation / updated client library
2013-09-02 12:28:52 -07:00
Hans-Joachim Kliemeck a35109982d changed from provided to compile 2013-09-02 19:37:46 +02:00
Marvin S. Addison 0753052360 Merge pull request #56 from serac/CASC-174
CASC-174 Provide Programmatic JAAS Login Facility for JBoss 7
2013-08-26 04:23:25 -07:00
Hans-Joachim Kliemeck 24a3f7d4bc updated memcached version 2013-08-17 14:19:42 +02:00
Hans-Joachim Kliemeck 65bcc5bd1b use interface instead of implementation 2013-08-17 13:45:34 +02:00
Marvin S. Addison 8c8db86056 CASC-174 Remove @version javadoc tag. 2013-08-15 11:05:32 -04:00
Marvin S. Addison 0e3837e765 CASC-174 Remove JBoss verbiage from error message. 2013-08-01 14:10:38 -04:00
Marvin S. Addison 31564c692e CASC-174 Provide facility for Servlet 3.0 programmatic JAAS login.
Servlet3AuthenticationFilter supersede the JBoss-specific
WebAuthenticationFilter for JBoss 7. It should also provide support for
programmatic JAAS login for any container that is Servlet 3.0/JEE6
compliant.
2013-08-01 14:05:01 -04:00
Scott 8742ed6f37 Merge pull request #54 from battags/master
Updated Jasig Parent POM Version
2013-06-26 17:50:14 -07:00
Scott Battaglia 3ca44202e7 Latest Jasig pom file 2013-06-26 20:48:55 -04:00
Scott e3aeeea78e Merge pull request #52 from battags/CASC-211
CASC-211 Better Ticket Validation Error Logic
2013-06-20 16:31:59 -07:00
Scott Battaglia 9a4275ee55 Renamed arguments 2013-06-20 19:28:35 -04:00
Scott 1dfb111903 Merge pull request #53 from battags/XML-Fix
Switched to SaxParserFactory directly.  Unit tests pass.  CASC-212
2013-06-20 04:08:12 -07:00
Scott Battaglia 4bcc71fa0d Switched to SaxParserFactory directly. Unit tests pass. CASC-212 2013-06-20 00:15:53 -04:00
Scott Battaglia 99494fe0b7 Fixed formatting again. 2013-06-19 23:16:17 -04:00
Scott Battaglia 125ee6f633 Changed default for exceptionOnValidationFailure and message.
This seems to have some formatting changes in it also for some reason.
2013-06-19 23:11:22 -04:00
Scott 7e5b8426a4 Merge pull request #51 from battags/master
[NOJIRA] Reformat to Eclipse Standard
2013-06-19 19:55:55 -07:00
Scott Battaglia 3b11774158 Reformat all files using shared CAS Eclipse formatter. 2013-06-19 22:50:02 -04:00
Scott d912c160c1 Merge pull request #49 from battags/CASC-206
CASC-206 Added Authentication Redirect Strategy to support original use case and new Faces support
2013-06-19 19:30:28 -07:00
Scott Battaglia 727037d1f5 Swithed to existing Reflection utils. Added supporting unit test. 2013-06-19 22:26:09 -04:00
Scott Battaglia 970e412a1b Merge branch 'master' into CASC-206 2013-06-19 22:25:18 -04:00
Scott 2c1043190f Merge pull request #50 from battags/CASC-207
CASC-207 - Converted to static logger for serializable class
2013-06-19 07:12:31 -07:00
Scott Battaglia 4f8dfb8543 CASC-207
Converted logger to static for de-serialization purposes.
2013-06-18 22:38:25 -04:00
Scott Battaglia 22d092c72a Added missing javadoc 2013-06-18 22:07:50 -04:00
Scott Battaglia 29216562f6 Fixed failing test case that was missing an import statement. 2013-06-18 21:57:22 -04:00
Scott Battaglia abca315fe8 Added redirect strategy to support Faces. 2013-06-18 21:56:58 -04:00
Scott Battaglia 826432d3f7 Merge branch 'master' of github.com:Jasig/java-cas-client 2013-06-18 21:08:50 -04:00
Scott 1d549fee96 Merge pull request #47 from mores/CASC-208
[CASC-208] Prevent unnecessary log errors
2013-05-07 18:06:32 -07:00
mores 4b1cdd8f47 getSocketFactory() should only be called on a sslContext that has been initialized. 2013-05-06 13:46:47 -04:00
Scott 287d788401 Merge pull request #45 from mores/CASC-205
[ CASC-205 ] Saml11TicketValidator unable to process type XSString
2013-04-25 06:45:10 -07:00
mores 7d130c9bfc Fix to allow client to work with Server 3.5.2 2013-04-25 09:11:11 -04:00
Misagh Moayyed 5e67c30b57 Merge pull request #40 from mmoayyed/CASC-180
CASC-180: Fix the issue with casting to http url connections and provide...
2013-03-11 13:35:54 -07:00
Misagh Moayyed b7699170a5 CASC-180: Renamed factory to be HttpURLConnectionFactory. 2013-03-10 20:51:27 -07:00
Misagh Moayyed 9dfa3a16a9 CASC-180: Fixed try/catch block issue with URL creation. 2013-03-09 15:00:45 -07:00
Misagh Moayyed c50b143c3f CASC-180: Removed the default url connection factory, allowed proxy retrieval to use the configured factory instance. 2013-03-06 09:34:39 -07:00
Misagh Moayyed c970d5b68d CASC-180: Fix the issue with casting to http url connections and provide a default instance for the http url factory. 2013-03-04 14:17:55 -07:00
Marvin S. Addison 950d4dc10b Merge pull request #39 from serac/casc-204
CASC-204 Prevent renew misconfiguration.
2013-03-04 09:51:51 -08:00
Marvin S. Addison a24995233d CASC-204 Prevent renew misconfiguration.
Prevent renew from being configured via filter init param, which can lead
to a half-configured state where authentication filter is configured for
renew without validation filter. With this change in place, renew MUST be
configured by a global configuration facility such as context parameter or
JNDI to ensure proper configuration.
2013-03-04 10:43:55 -05:00
Misagh Moayyed cdaf07e994 Merge pull request #36 from mmoayyed/CASC-180
CASC-180: Add support for Client Side Certificates
2013-03-03 09:13:14 -08:00
Scott Battaglia 3e5f97a4df Merge branch 'master' of github.com:battags/java-cas-client 2013-02-17 21:31:55 -05:00
Misagh Moayyed 035c946c8d CASC-180 - Add support for Client Side Certificates
Moved url connection factory interface and its https impl into the ssl package.
2013-01-24 15:47:22 -07:00
Misagh Moayyed 442b9ab5be Fixed javadoc for unused parameter. 2013-01-24 12:07:22 -07:00
Misagh Moayyed 62f9058b78 CASC-180 - Add support for Client Side Certificates
In order to utilize client side certificates, this commit facilitates the creation of a SSLSocketFactory on HttpsURLConnection for the client. The configuration is encapsulated inside a url factory instance that applies the adjustments where necessary.

This commit is continuation of the posted pending pull on github that is at:
https://github.com/Jasig/java-cas-client/pull/26

...and applies the suggestions and fixes that were brought to light during the code review.
2013-01-24 12:01:47 -07:00
Scott ed0446f24e Merge pull request #35 from battags/CASC-202
CASC-202 Migrate Commons Logging to SLF4J

Migrated to SLF4J, updated License header to match main CAS project, and re-ran script.
2013-01-15 19:06:54 -08:00