search

rbCAS / CASino

CASino is a Ruby-based Single Sign-On solution supporting the CAS standard
MIT License
329 stars 189 forks source link

How CAS server identify differency domain name #171

Closed flameA closed 7 years ago

flameA commented 7 years ago

Hi dev CASino team,

This gem so helpful, after setup. My app is work fine. However, i don't know how it work when when can't share cookie, local Storage, session Storage cross a domain.

Example I have 2 web side with 2 domain is abc.com and xyz.com . I have CAS server have domain like account.abc.com. step 1: I sign in to abc.com side, it direct me to account.abc.com step 2: i put username and password. server verify true.

step 3: abc.com side: receive server ticket verify true and make me sign in success in abc.com site.

when side xyz.com sign in, my server xyz.com automatic verify with account.abc.com server and make me login. So, problem here. how account.abc.com identify xyz.com side. what and where info browser save

flameA commented 7 years ago

Please help. I take a lot of time for this. and this talk very important.

AjayBarot commented 7 years ago

@flameA : You can debug the casino gem to understand the whole process of ticket generation and ticket verification. May be this will help you sso casino blog.

Cheers

luxflux commented 7 years ago

I'm not sure if I understood your usecase excatly but it sounds like you want to automatically login a user after a completed sign up in an application independent from CASino.

You may have a look at Auth-Token-Login, it works for me in several projects like a charm.

pencil commented 7 years ago

Not sure why OP went silent after even pinging me on Twitter.