CAS Developer - Google Groups

Groups

Contact owners and managers

1–30 of 485

0 selected

Sep 9

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/09/08/vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/09/08/vuln/

Sep 9

Tomasz Dominikowski

Sep 2

Is a property the right way to make the `jwk` token header optional? (PR #9525)

Hello, I opened https://github.com/apereo/cas/pull/9525 a few days ago and I would like to ask for

unread,

Is a property the right way to make the `jwk` token header optional? (PR #9525)

Hello, I opened https://github.com/apereo/cas/pull/9525 a few days ago and I would like to ask for

Sep 2

Aug 31

Request for a CAS Accessibility Audit

As part of the work the CAS project is undertaking with support from NLnet [1], the final item on our

unread,

Request for a CAS Accessibility Audit

As part of the work the CAS project is undertaking with support from NLnet [1], the final item on our

Aug 31

Aug 25

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/08/25/vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/08/25/vuln/

Aug 25

Jun 23

Changes to CAS Security Vulnerability Response

Please see https://apereo.github.io/2026/06/23/sec-grace-window/

unread,

Changes to CAS Security Vulnerability Response

Please see https://apereo.github.io/2026/06/23/sec-grace-window/

Jun 23

Jun 18

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/06/18/vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/06/18/vuln/

Jun 18

Jun 8

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/06/06/vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/06/06/vuln/

Jun 8

May 27

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/05/27/oidc-vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/05/27/oidc-vuln/

May 27

May 21

Java CAS Client Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/05/20/casc-jwt-vuln/

unread,

Java CAS Client Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/05/20/casc-jwt-vuln/

May 21

Mar 6

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/03/06/jwt-vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/03/06/jwt-vuln/

Mar 6

Misagh, … Pablo Vidaurri3

Jan 14

CAS Community Office Hours

Also interested On Wednesday, January 14, 2026 at 12:36:19 PM UTC-6 Dustin Luck wrote: I am

unread,

CAS Community Office Hours

Also interested On Wednesday, January 14, 2026 at 12:36:19 PM UTC-6 Dustin Luck wrote: I am

Jan 14

9/29/25

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/09/25/oauth-oidc-vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/09/25/oauth-oidc-vuln/

9/29/25

9/27/25

Re: [apereo-info] Urgent Support Needed for Uninstalling from Chrome on Mac

Dear Alice, Thank you for reaching out. I'd like to clarify that the Apereo Foundation is not a

unread,

Re: [apereo-info] Urgent Support Needed for Uninstalling from Chrome on Mac

Dear Alice, Thank you for reaching out. I'd like to clarify that the Apereo Foundation is not a

9/27/25

8/19/25

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/08/19/simplemfa-vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/08/19/simplemfa-vuln/

8/19/25

6/24/25

puppeteer tests failing

I am running this puppeteer test on master: ./ci/tests/puppeteer/run.sh --scenario ./ci/tests/

unread,

puppeteer tests failing

I am running this puppeteer test on master: ./ci/tests/puppeteer/run.sh --scenario ./ci/tests/

6/24/25

Ray Bon, Misagh Moayyed2

6/21/25

add DUO_SECURITY_ADMIN_SKEY to pupeteer test

export DUO_SECURITY_ADMIN_SKEY=MY_KEY On Saturday, June 21, 2025 at 6:43:03 AM UTC+4 rb...@uvic.ca

unread,

add DUO_SECURITY_ADMIN_SKEY to pupeteer test

export DUO_SECURITY_ADMIN_SKEY=MY_KEY On Saturday, June 21, 2025 at 6:43:03 AM UTC+4 rb...@uvic.ca

6/21/25

Andrea Maria Farina

4/27/25

Surrogate auth support in oidc password flow

Hello, I would like to contribute to the project by adding support for surrogate authentication in

unread,

Surrogate auth support in oidc password flow

Hello, I would like to contribute to the project by adding support for surrogate authentication in

4/27/25

4/11/25

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/04/11/oidc-webauthn-vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/04/11/oidc-webauthn-vuln/

4/11/25

3/21/25

error with module @napi-rs/canvas

I am running this test: ./ci/tests/puppeteer/run.sh --scenario ./ci/tests/puppeteer/scenarios/

unread,

error with module @napi-rs/canvas

I am running this test: ./ci/tests/puppeteer/run.sh --scenario ./ci/tests/puppeteer/scenarios/

3/21/25

Ray Bon, Misagh2

3/18/25

Unit test not running

You're missing the fact that testSimple cannot run something tagged for LDAP. -- Misagh On Wed,

unread,

Unit test not running

You're missing the fact that testSimple cannot run something tagged for LDAP. -- Misagh On Wed,

3/18/25

1/29/25

7.1.x build failing

The 7.1.x branch references this repository, but it requires authorization: https://jitpack.io/com/

unread,

7.1.x build failing

The 7.1.x branch references this repository, but it requires authorization: https://jitpack.io/com/

1/29/25

1/27/25

User enumeration disclosure in CAS

@CAS developers: any feedback on this? Please check if this can be implemented. Any feedback will be

unread,

User enumeration disclosure in CAS

@CAS developers: any feedback on this? Please check if this can be implemented. Any feedback will be

1/27/25

10/2/24

how to properly load CAS into Intellij IDE?

I disabled parallelism in gradle.properties, then it loads fine into Intellij. org.gradle.parallel=

unread,

how to properly load CAS into Intellij IDE?

I disabled parallelism in gradle.properties, then it loads fine into Intellij. org.gradle.parallel=

10/2/24

Olivier MOUTRET

9/20/24

CAS Shell - Error Windows version on CAS Shell

Le « CasCommandLineShellApplication » indique une mauvaise version de Windows

unread,

CAS Shell - Error Windows version on CAS Shell

Le « CasCommandLineShellApplication » indique une mauvaise version de Windows

9/20/24

Jose Luis Martínez del Amor, Ray Bon2

7/22/24

Username case in RedisMultifactorAuthenticationTrustStorage

Jose Luis, You can make the username all one case. See https://apereo.github.io/cas/7.0.x/

unread,

Username case in RedisMultifactorAuthenticationTrustStorage

Jose Luis, You can make the username all one case. See https://apereo.github.io/cas/7.0.x/

7/22/24

Jose Luis Martínez del Amor, Łukasz Woźniak3

7/20/24

10 seconds delay in mfa-gauth and trusted devices

Hi, Definitely overwriting the class so that there were no deletions in the queries improved

unread,

10 seconds delay in mfa-gauth and trusted devices

Hi, Definitely overwriting the class so that there were no deletions in the queries improved

7/20/24

6/26/24

CAS OAuth/OpenID Connect Vulnerability Disclosure

Please see https://apereo.github.io/2024/06/26/oidc-vuln/

unread,

CAS OAuth/OpenID Connect Vulnerability Disclosure

Please see https://apereo.github.io/2024/06/26/oidc-vuln/

6/26/24

Felix Scheinost

6/13/24

Discussion: LoggingUtils#prepareLogEvent should gracefully handle missing ApplicationContext

Hi, currently when using `CasAppender` it is difficult to troubleshoot issues the application has on

unread,

Discussion: LoggingUtils#prepareLogEvent should gracefully handle missing ApplicationContext

Hi, currently when using `CasAppender` it is difficult to troubleshoot issues the application has on

6/13/24

5/18/24

CAS OAuth/OpenID Connect Vulnerability Disclosure

Please see: https://apereo.github.io/2024/05/18/oauth-vuln/

unread,

CAS OAuth/OpenID Connect Vulnerability Disclosure

Please see: https://apereo.github.io/2024/05/18/oauth-vuln/

5/18/24

Misagh Moayyed, atilling2

2/20/24

Apereo #cas Slack Channel

Would like to signup with conncoll.edu domain. On Thursday, November 16, 2017 at 5:46:10 PM UTC-5

unread,

Apereo #cas Slack Channel

Would like to signup with conncoll.edu domain. On Thursday, November 16, 2017 at 5:46:10 PM UTC-5

2/20/24

Search

Clear search

Close search

Google apps

Main menu