google-code-export / rubycas-client

Automatically exported from code.google.com/p/rubycas-client
1 stars 1 forks source link

Invalid Ticket Guessed when Posting to a application with rubycas-client #39

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
When you post something to an application that is using rubycas-client, and the 
service_url is not explicit, rubycas try to guess the service with this code:

params = controller.params.dup
service_url = controller.url_for(params)

Rails automatically converts the body of the post to params, making impossible 
to guess the service url.

I implemented the solution substituting code above with:

params = controller.request.path_parameters.dup
service_url = controller.url_for(params)

This way, parameters in the uri are not sent to cas as the service.

What do you think of that approach?

Roberto

Original issue reported on code.google.com by robert...@gmail.com on 8 Jul 2010 at 11:03

GoogleCodeExporter commented 9 years ago
Matt, C'mon!!!

Original comment by robert...@gmail.com on 12 Aug 2010 at 8:35

GoogleCodeExporter commented 9 years ago
Sorry Roberto, been super swamped. The idea looks right to me although it would 
need some thorough testing of course, which I don't have time for right now. 
Last few days I've been working on bringing RubyCAS-Server up to speed to work 
with the newer versions of Camping. This is turning out to be a major 
undertaking and I need to take care of that first before I can move on to 
dealing with higher level stuff.

Original comment by matt.zuk...@gmail.com on 13 Aug 2010 at 2:16