Open GoogleCodeExporter opened 9 years ago
Have a look at http://code.google.com/p/rubycas-client/issues/detail?id=35 and
at
this delta http://github.com/gunark/rubycas-
client/commit/06148ff37a8db6e20c82b1c2aa03c637c8499876
You should now get a 402 Unauthorized response when you try to access an .xml
resource with ActiveResource.
CAS authentication for REST clients is actually kind of problematic. Probably
the
"right" way to do it is via proxy ticketing. Alternatively I am told there is
now a
RESTful CAS API, implemented in the JA-SIG server, but I haven't had a chance
to look
into this yet.
The last part of what you're saying is kind of alarming -- the CAS filter
shouldn't
just be letting you through to .xml resources without authentication. Maybe
it's an
AuthLogic thing? I dunno. I can't imagine how the CAS client could be
differentiating
between URIs that do or do not end in .xml. There was no such code in the
client
until that most recent commit from Roberto Klein.
Original comment by matt.zuk...@gmail.com
on 13 Apr 2010 at 5:13
Original issue reported on code.google.com by
frere.je...@gmail.com
on 12 Mar 2010 at 9:21