[jira] [Updated] (SHIRO-373) Complete CAS remember-me support

["Brian Demers (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SHIRO-373?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brian Demers updated SHIRO-373:
-------------------------------
    Labels: patch  (was: )

> Complete CAS remember-me support
> --------------------------------
>
>                 Key: SHIRO-373
>                 URL: https://issues.apache.org/jira/browse/SHIRO-373
>             Project: Shiro
>          Issue Type: Bug
>            Reporter: Jérôme Leleu
>              Labels: patch
>             Fix For: 1.3.0
>
>         Attachments: svn-CasAuthenticatedUserFilter.patch
>
>
> I was preparing a demo on CAS support for Shiro : https://github.com/leleuj/cas-shiro-demo and I did realize the remember-me feature is not fully addressed.
> One use case is missing : if the user is already remembered (by CAS) and want to be authenticated, it should be redirected to CAS server with a specific parameter (renew=true) to force CAS re-authentication.
> For this use case, I created a CasAuthenticatedUserFilter which checks if the user is authenticated (not remembered) and sends him to the CAS server if he's not (with the specific parameter to force re-authentication if he's already remembered).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)