search

rubycas / rubycas-server

Provides single sign-on authentication for web applications, implementing the server-end of Jasig's CAS protocol.
http://rubycas.github.com
Other
628 stars 270 forks source link

Add support for allowed_service_ips whitelist. #148

Closed adamcrown closed 11 years ago

adamcrown commented 11 years ago

allowed_service_ips can be set in config.yml to limit service validations to a certain set of IPs or IP ranges. This prevents just any site from being able to grab potentially sensitive personal information.

adamcrown commented 11 years ago

This should probably also close https://github.com/rubycas/rubycas-server/pull/87 since it's a different way of handling the same security issue.

Thanks.

tpickett66 commented 11 years ago

Done