Problème Service Registry CAS 6.3

[Florent Vallee]

Bonjour,

J'ai un soucis pour autoriser un site à utiliser notre CAS.

Voici mon fichier json :

{
    "@class" : "org.apereo.cas.services.RegexRegisteredService",
    "serviceId" : "^https://toto.unis.fr/.*",
    "name" : "Toto",
    "logo": "themes/toto/images/favicon.ico",
    "id": 1611215127,
    "evaluationOrder" : 99999

}

Le site est refusé, et dans le fichier de log j'ai cette erreur :

#033[33m2021-10-19 17:31:42,366 WARN [org.apereo.cas.services.RegisteredServiceAccessStrategyUtils] - <Unauthorized Service Access. Service [https://toto.unis.fr?auth_method=CAS] is not found in service registry.>#033[m

De quoi cela vient t'il ? il me semble avoir autorisé tout le site.

Merci pour votre aide.

Cordialement

 

Florent

 

[Jérôme LELEU]

Hi,

Please use the English language for this mailing list.

You defined: https://toto.unis.fr/.* and you have: https://toto.unis.fr?auth_method=CAS

This does not work because of the trailing slash in your definition.

That said, you shouldn't define: https://toto.unis.fr.* for security reasons.

So https://toto\\.unis\\.fr\\?auth_method=CAS should be the right definition for you.

Thanks.

Best regards,

Jérôme

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/1953932400.991632.1634657553821.JavaMail.zimbra%40insa-cvl.fr.