Hello.
I want to set attributeReleasePolicy in service (json).
I have two attribute - role, firstname - and then I want to return attribute only "role".
So I registry service like this.
----------- cas service.json ------------
{
"@class": "org.apereo.cas.services.RegexRegisteredService",
"serviceId": "test1234",
"name" : "test"
"id" : 80000000000000000
"attributeReleasePolicy":{
"@class": "org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy",
"allowedAttribytes":["java.util.ArrayList",["role"]]
}
}
-------------------------------------------------
Then, I call service ticket validation api (/p3/serviceValidate), It return all attribute - role, firstname- still..
Even if I set attributeReleasePolicy "deny" but it return all attribute...
I suppose to attributeReleasePolicy is not working in my environment...
Would I set more config about it?
Please give me a guide.
Thanks.