Re: [cas-user] How to test Redis Ticket Registry?

[Ray Bon]

Zoran,

Is failed validation on the first use of the ST?

ST can be used only once. As such, they are not stored very long.

Ray

On Wed, 2019-08-14 at 07:52 -0700, ZP wrote:

Hello,

To test the whole flow I am using CAS WAR Overlay and CASified Spring Boot application.

After a successful login, the CAS Server is redirecting back to the CAS Client App and granting ST. If I try to use the same ST again I am getting an error that the SERVICE_TICKET_VALIDATE_FAILED. 

I am using  Redis as a Ticket Registry and when I list Redis storage CAS only store TGT inside. 

Can someone provide info on how to test Ticket Storage and the flow? Maybe I missed something?

-- 

Ray Bon

Programmer Analyst

Development Services, University Systems

2507218831 | CLE 019 | rb...@uvic.ca

I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations.

[Ray Bon]

Zoran,

Can you clarify what it is that you are trying to accomplish with your test?

You can hit cas/logout, this will invalidate the TGT. You can let the CAS session expire (set your timeouts to a few minutes - I think 2 is the minimum). Then visit an application that requires login.

If you shorten CAS session expiry, your application may remain logged in. If you only have one test application, save the URL when you go to the CAS log in page and hit it in a new tab.

With logout, a logout request is sent to applications that logged in under a TGT; with expiry, no logout is sent.

Ray

On Wed, 2019-08-14 at 10:34 -0700, ZP wrote:

Thanks for the response Ray.

No, I've tried to use the ST again. So it should be used only once as you say. So how can you test the whole flow when 

Ticket Registry is setup? I can't find any useful informations on that ?