[Geoserver-devel] [JIRA] (GEOS-10342) [CAS extension] /logout should support service parameter

_Failed_to_Retrieve · December 22, 2021, 12:35pm

jpommier created an issue

[CAS extension] /logout should support service parameter

Issue Type:	Bug
Affects Versions:	2.20.1
Assignee:	Unassigned
Components:	CAS
Created:	22/Dec/21 1:35 PM
Priority:	Medium
Reporter:	jpommier

Hi,

Currently, /logout uses the url parameter, for the return URL (defined in GeoServerCasConstants.LOGOUT_URL_PARAM). According to recent CAS documentation, it should be service, rather than url, at least on most recent versions of CAS. I suppose at some point url was the proper parameter, so the best fix would probably be to allow to configure it in the UI ?

BTW, there is a hardcoded URL here in the code of the extension. I’m pretty much certain it should not be there (and I don’t see what the returnURL param is there for)

Thanks

Add Comment

Get Jira notifications on your phone! Download the Jira Cloud app for Android or iOS
This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100187-sha1:76abc0a)