search

cloudogu / sonar-cas-plugin

CAS Authentication support for SonarQube
14 stars 8 forks source link

Allow Proxy-Ticketing from CAS #36

Closed ppxl closed 3 years ago

ppxl commented 3 years ago

SonarQube should be empowered to process [CAS Proxy Tickets](https://apereo.github.io/cas/6.0.x/installation/Configuring-Proxy-Authentication.html].

One idea is to provide an API endpoint that

  1. receives proxy tickets
  2. validates its authenticity
  3. issues an authentication token, similar to the existing JWT tokens

Unless the generated token is reused in the same connection it is highly probable that the generated token must be stored and thus be removed after it was invalidated.

This is the partner issue to cloudogu/cockpit#116