search

eurekaclinical / cas

Patched JASIG CAS server used for authentication by Eureka!
http://eurekaclinical.org
Apache License 2.0
2 stars 6 forks source link

Support non-interactive logins #33

Closed arpost closed 7 years ago

arpost commented 7 years ago

In the situation where the user does not yet have a session for a web application but there is an AJAX call to a protected resource, we want the response to be 400 (Bad Request) rather than the login screen if the user has not yet logged into CAS.

Similarly, in the situation where the user does not yet have a session for a REST API but there is a call to the API, we want the response to be 400 (Bad Request) rather than the login screen if the user has not yet logged into CAS.

I believe this has to be implemented as a separate workflow in CAS server, possibly triggered by a special query parameter similar to gateway=true.

arpost commented 7 years ago

Actually, it seems that gateway=true is designed exactly for this purpose. Done!