View and Edit of allowedAtributes in cas-management 6.6.3

[Büchler, Martin]

Hello there,

Question is, how do we mange 'allowedAttributes' if we cannot view or edit them in the cas-management app?

I want to view and edit the 'allowedAttributes' of 'attributeReleasePolicy' set up per service in the cas-management GUI. The XHR payload from URL http://<cas-managementhost>/api/services/35 is

{
"@class": "org.apereo.cas.services.CasRegisteredService",
"serviceId": "^https?://.*",
"name": "Some Environement",
"id": 35,
"description": "Some Environement",
"evaluationOrder": 10,
"attributeReleasePolicy": {
"@class": "org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy",
"allowedAttributes": [
"subscriberid"
]
}
}

The 'Attribute Release' tab shows
--------------------------------------
Attribute Release Policy

Policy
RETURN ALLOWED v

Return Allowed v
--------------------------------------

but the bottom control seems to be a read-only dropdown list with the single entry 'Return Allowed' instead of an editable list like you have it e.g. for the 'Allowed Providers' from the 'Access Strategy' tab

--------------------------------------
Delegated Authentication
...
Allowed Providers

Allowed Providers
Google x Github x
--------------------------------------

Regards
--
Martin

[Ray Bon]

Martin,

Do you have attributes defined in the config file?

e.g. cas.authn.attributeRepository.stub.attributes.mail=mail

In 6.5 I have those in management.properties. Not sure if they can go in cas.properties.

Ray

On Tue, 2023-08-29 at 12:50 +0000, 'Büchler, Martin' via CAS Community wrote:

Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.

--

- Website: https://apereo.github.io/cas

- Gitter Chatroom: https://gitter.im/apereo/cas

- List Guidelines: https://goo.gl/1VRrw7

- Contributions: https://goo.gl/mh7qDG

---

You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/BE1P281MB1460C938084069D883E9094292E7A%40BE1P281MB1460.DEUP281.PROD.OUTLOOK.COM.

[martin....@springer.com]

Hi Ray,

That is a great idea. Actually we have a custom attribute repository, which was easily to configure also for cas-management server in CAS 4.0.2 just using XML files. In the end, I assume, just the getPossibleUserAttributeNames method is used, which is fed by another statically configured backing map with the cas-management deployment. Using stub attribute repository properties work nicely right away on the first try. 

Thanks for the hint.

Regards

Martin