CAS backed BASIC Authentication

[Ryan Connolly <ry...@gmail.com>]

Being related to CAS, this email is likely targeted at Jérôme LELEU who I
thank for the simple to follow CAS examples (and of course the contribution
to Shiro)...  I am successfully authenticating a couple of internal web
applications using the CasFilter but these web applications also house web
APIs that we currently authenticate with authcBasic.  I am wondering if
there has been any work done to allow Basic Authentication to pass
credentials on to CAS or if I will need to look into modifying our
BasicHttpAuthenticationFilter implementation to act as a proxy to CAS?  I'm
not entirely clear on what would be necessary should I need to do this
myself but thought I would ask if this has been encountered or considered
at all.

Thanks in advance,
-Ryan Connolly

Re: CAS backed BASIC Authentication

[Ryan Connolly <ry...@gmail.com>]

Thank you, Jérôme.  Exactly the hints I needed :)

-Ryan


On Wed, Dec 18, 2013 at 11:15 AM, jleleu <le...@gmail.com> wrote:

> Hi,
>
> It depends if your applications host or call external web services.
>
> If your apps host web services and you want to be able to authenticate
> through basic auth to access them, you will need to create a custom
> BasciHttpAuthenticationFilter, taking the credentials and sending them to
> the CAS REST API : https://wiki.jasig.org/display/CASUM/RESTful+API.
>
> If your apps call web services, it's clearly the proxy use case. Right now,
> the shiro-cas module does not support the proxy feature. Though, one
> extension I created to integrate with various protocols as a client does :
> https://github.com/bujiio/buji-pac4j. It might be worth to give it a try.
>
> Best regards,
> Jérôme
>
>
>
>
> --
> View this message in context:
> http://shiro-user.582556.n2.nabble.com/CAS-backed-BASIC-Authentication-tp7579473p7579474.html
> Sent from the Shiro User mailing list archive at Nabble.com.
>

Re: CAS backed BASIC Authentication

[jleleu <le...@gmail.com>]

Hi,

It depends if your applications host or call external web services.

If your apps host web services and you want to be able to authenticate
through basic auth to access them, you will need to create a custom
BasciHttpAuthenticationFilter, taking the credentials and sending them to
the CAS REST API : https://wiki.jasig.org/display/CASUM/RESTful+API.

If your apps call web services, it's clearly the proxy use case. Right now,
the shiro-cas module does not support the proxy feature. Though, one
extension I created to integrate with various protocols as a client does :
https://github.com/bujiio/buji-pac4j. It might be worth to give it a try.

Best regards,
Jérôme




--
View this message in context: http://shiro-user.582556.n2.nabble.com/CAS-backed-BASIC-Authentication-tp7579473p7579474.html
Sent from the Shiro User mailing list archive at Nabble.com.