[Geoserver-devel] [JIRA] (GEOS-9805) Support transforming CAS response custom attributes into roles

GeoServer GeoServer Developer
1

Andrea Aime created an issue

GeoServer / BugGEOS-9805

Support transforming CAS response custom attributes into roles

Issue Type:

BugBug

Assignee:

Unassigned

Components:

CAS

Created:

24/Nov/20 12:56 PM

Priority:

MediumMedium

Reporter:

Andrea Aime

Currently role extraction si allowed from a group service, a role service, or from an HTTP header. CAS allows to add custom attributes in its XML response, e.g.:

{
"serviceResponse" : {
"authenticationSuccess" : {
"user" : "username",
"proxyGrantingTicket" : "PGTIOU-84678-8a9d...",
"proxies" : [ "https://proxy1/pgtUrl", "https://proxy2/pgtUrl" ],
"attributes" :

{ "firstName" : "John", "affiliation" : [ "staff", "faculty" ], "title" : "Mr.", "email" : "jdoe@anonymised.com:jdoe@anonymised.com", "lastname" : "Doe" }

}
}
}

Add Comment

Add Comment

Get Jira notifications on your phone! Download the Jira Cloud app for Android or iOS

This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100151-sha1:a1486db)

Atlassian logo