Signle sign out filter customization

[John Nonak]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Hi,

Sorry I m quite a newbie here. I looking for a way to apply custom logout code uppon the CAS single sign out. I managed to get the single sign out working with Spring Security and everything seems to work fine (sessions are invalidated). However we do have a certain amount of custom code for each application when the user logs out (for instance logging the action etc.) but I do not find a way to add extra logout handlers.

So the question is is there a way to extend the filter somehow (the SingleSignOutFilter class is final, I cannot overwrite it) or add custom logout handlers ?

Thanks !
Nonak

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[Adam Rybicki]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Nonak,

I think a better approach would be to add your own filter in which you could perform the additional work.  You can have multiple filters mapped to process each HTTP request, and the order of filter-mapping elements in web.xml determines their order.

Adam

John Nonak wrote:

Hi,

Sorry I m quite a newbie here. I looking for a way to apply custom logout code uppon the CAS single sign out. I managed to get the single sign out working with Spring Security and everything seems to work fine (sessions are invalidated). However we do have a certain amount of custom code for each application when the user logs out (for instance logging the action etc.) but I do not find a way to add extra logout handlers.

So the question is is there a way to extend the filter somehow (the SingleSignOutFilter class is final, I cannot overwrite it) or add custom logout handlers ?

Thanks !
Nonak

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas
  

[arybicki.vcf]

---

begin:vcard
fn:Adam Rybicki
n:Rybicki;Adam
org:Unicon, Inc.;Professional Services
adr:Suite 113;;3140 North Arizona Avenue;Chandler;AZ;85225;United States
email;internet:arybicki@...
tel;work:[phone]
tel;home:[phone]
tel;cell:[phone]
x-mozilla-html:FALSE
url:http://www.unicon.net/
version:2.1
end:vcard

---

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[John Nonak]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Yes I suppose I ll implement something like that. The only problem I see with this solution is that I have to duplicate the code to identify the "logout" request call from CAS. It's not a big deal but if in the future CAS server releases the processing of the single sign out changes, I would need to modify my custom logout handlers. If the current CAS single sign out filter would offer the possibility to add custom handlers, this kind of changes wouldn't be an issue for us... just an hint to the CAS developpers :)

Nonak

----- Original Message ----
From: Adam Rybicki <arybicki@...>
To: Yale CAS mailing list <cas@...>
Sent: Friday, May 16, 2008 9:31:04 PM
Subject: Re: Signle sign out filter customization

Nonak,

I think a better approach would be to add your own filter in which you could perform the additional work.  You can have multiple filters mapped to process each HTTP request, and the order of filter-mapping elements in web.xml determines their order.

Adam

John Nonak wrote:

Hi,

Sorry I m quite a newbie here. I looking for a way to apply custom logout code uppon the CAS single sign out. I managed to get the single sign out working with Spring Security and everything seems to work fine (sessions are invalidated). However we do have a certain amount of custom code for each application when the user logs out (for instance logging the action etc.) but I do not find a way to add extra logout handlers.

So the question is is there a way to extend the filter somehow (the SingleSignOutFilter class is final, I cannot overwrite it) or add custom logout handlers ?

Thanks !
Nonak

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[John Nonak]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Hi,

I just would like to know if the solution I proposed is being consired for later releases ? (I mean the possibility to add custom logout handler within the single sign out filter).

Duplicating the code of the single sign out filter is far from being a nice solution.

Thanks.

Nonak

----- Original Message ----
From: John Nonak <nonak31@...>
To: Yale CAS mailing list <cas@...>
Sent: Sunday, May 18, 2008 1:17:37 PM
Subject: Re: Signle sign out filter customization

Yes I suppose I ll implement something like that. The only problem I see with this solution is that I have to duplicate the code to identify the "logout" request call from CAS. It's not a big deal but if in the future CAS server releases the processing of the single sign out changes, I would need to modify my custom logout handlers. If the current CAS single sign out filter would offer the possibility to add custom handlers, this kind of changes wouldn't be an issue for us... just an hint to the CAS developpers :)

Nonak

----- Original Message ----
From: Adam Rybicki <arybicki@...>
To: Yale CAS mailing list <cas@...>
Sent: Friday, May 16, 2008 9:31:04 PM
Subject: Re: Signle sign out filter customization

Nonak,

I think a better approach would be to add your own filter in which you could perform the additional work.  You can have multiple filters mapped to process each HTTP request, and the order of filter-mapping elements in web.xml determines their order.

Adam

John Nonak wrote:

Hi,

Sorry I m quite a newbie here. I looking for a way to apply custom logout code uppon the CAS single sign out. I managed to get the single sign out working with Spring Security and everything seems to work fine (sessions are invalidated). However we do have a certain amount of custom code for each application when the user logs out (for instance logging the action etc.) but I do not find a way to add extra logout handlers.

So the question is is there a way to extend the filter somehow (the SingleSignOutFilter class is final, I cannot overwrite it) or add custom logout handlers ?

Thanks !
Nonak

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[scott_battaglia]

John,

Sorry for the delayed response on this (it sort of got lost and has now been found in the huge email inbox cleanup of 2008 ;-)).  If you add a JIRA issue detailing what you need, we can see it if can make it into the next CAS client release.

Thanks
-Scott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia

On Mon, May 19, 2008 at 2:39 AM, John Nonak <nonak31@...> wrote:

Hi,

I just would like to know if the solution I proposed is being consired for later releases ? (I mean the possibility to add custom logout handler within the single sign out filter).

Duplicating the code of the single sign out filter is far from being a nice solution.

Thanks.

Nonak

----- Original Message ----
From: John Nonak <nonak31@...>
To: Yale CAS mailing list <cas@...>

Sent: Sunday, May 18, 2008 1:17:37 PM
Subject: Re: Signle sign out filter customization

Yes I suppose I ll implement something like that. The only problem I see with this solution is that I have to duplicate the code to identify the "logout" request call from CAS. It's not a big deal but if in the future CAS server releases the processing of the single sign out changes, I would need to modify my custom logout handlers. If the current CAS single sign out filter would offer the possibility to add custom handlers, this kind of changes wouldn't be an issue for us... just an hint to the CAS developpers :)

Nonak

----- Original Message ----
From: Adam Rybicki <arybicki@...>
To: Yale CAS mailing list <cas@...>
Sent: Friday, May 16, 2008 9:31:04 PM
Subject: Re: Signle sign out filter customization

Nonak,

I think a better approach would be to add your own filter in which you could perform the additional work.  You can have multiple filters mapped to process each HTTP request, and the order of filter-mapping elements in web.xml determines their order.

Adam

John Nonak wrote:

Hi,

Sorry I m quite a newbie here. I looking for a way to apply custom logout code uppon the CAS single sign out. I managed to get the single sign out working with Spring Security and everything seems to work fine (sessions are invalidated). However we do have a certain amount of custom code for each application when the user logs out (for instance logging the action etc.) but I do not find a way to add extra logout handlers.

So the question is is there a way to extend the filter somehow (the SingleSignOutFilter class is final, I cannot overwrite it) or add custom logout handlers ?

Thanks !
Nonak

_______________________________________________
Yale CAS mailing list
cas@...

http://tp.its.yale.edu/mailman/listinfo/cas

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas