casinthecloud/java-spring-security-cas-client-demo

Demo webapp protected by the CAS client from Spring Security

Introduction

CAS in the cloud is a full-stacked project to deploy your CAS server in the cloud.

It is based on the CAS server (and CAS management webapp) v5.0.

The tickets are handled via Memcached and the services are defined as JSON files.

Everything is dockerized for the cloud.

Installation

Hosts

You need to locally add the cas-server and cas-management hosts by updating your /etc/hosts/ file:

127.0.0.1     localhost     cas-server     cas-management

Build the CAS webapps

You can build the CAS webapps via the following command at the root directory: ./package.sh

Launch CAS in the cloud

You can run the CAS stack using the following command at the root directory: docker-compose up.

The CAS server is available on the following URL: http://cas-server:8080/login. You can login using leleuj/leleuj or jleleu/jleleu, but of course, the default authentication handler MUST be changed.

The CAS management webapp is available on the following URL: http://cas-management:8081.

java-spring-security-cas-client-demo's Issues

Can this code block work without enabling ssl in the client ?

I am trying to use client demo combining with the virtual cas server exampled as : https://github.com/ubc/vagrant-cas. I have updated client securityContext.xml as below:

<sec:http use-expressions="true" entry-point-ref="casEntryPoint">
	<sec:intercept-url pattern="/protected/**" access="isAuthenticated()" />
	<sec:intercept-url pattern="/**" access="permitAll" />
	<sec:custom-filter position="CAS_FILTER" ref="casFilter" />
	<!-- Handle CAS logout request from the browser (on /j_spring_security_logout): -->
	<sec:logout />
	<!-- Handle CAS logout directly from the CAS server: -->
	<sec:custom-filter before="CAS_FILTER" ref="singleLogoutFilter" />
</sec:http>

<bean id="casFilter"
	class="org.springframework.security.cas.web.CasAuthenticationFilter">
	<property name="authenticationManager" ref="authenticationManager" />
</bean>

<bean id="singleLogoutFilter" class="org.jasig.cas.client.session.SingleSignOutFilter" />

<bean id="casEntryPoint"
	class="org.springframework.security.cas.web.CasAuthenticationEntryPoint">
	<!-- Change with your own CAS server -->
	<property name="loginUrl"
		value="http://192.168.33.10/cas/login" />
	<property name="serviceProperties" ref="serviceProperties" />

</bean>
<bean id="serviceProperties" class="org.springframework.security.cas.ServiceProperties">
	<!-- Change with your own host name -->
	<property name="service"
		value="http://localhost:8080/j_spring_cas_security_check" />
</bean>

<sec:authentication-manager alias="authenticationManager">
	<sec:authentication-provider ref="casAuthenticationProvider" />
</sec:authentication-manager>

<bean id="casAuthenticationProvider"
	class="org.springframework.security.cas.authentication.CasAuthenticationProvider">
	<property name="authenticationUserDetailsService">
		<bean
			class="org.springframework.security.core.userdetails.UserDetailsByNameServiceWrapper">
			<constructor-arg ref="userService" />
		</bean>
	</property>
	<property name="serviceProperties" ref="serviceProperties" />
	<property name="ticketValidator">
		<bean class="org.jasig.cas.client.validation.Cas20ServiceTicketValidator">
			<!-- Change with your own CAS server -->
			<constructor-arg index="0"
				value="http://192.168.33.10/cas/p3/" />
		</bean>
	</property>
	<property name="key" value="an_id_for_this_auth_provider_only" />
</bean>

<sec:user-service id="userService">
	<sec:user name="scott" password="casuser" authorities="ROLE_ADMIN" />
</sec:user-service>

I can not login with the user scott. As far as I can see the client app server jetty does not have any ssl certificate and https://wiki.jasig.org/display/casum/end-to-end+windows+example#End-to-endWindowsExample-DeploytheServer this tutorial says that both client and server sides should have the ssl certificates. Can the problem be related to this issue?

Thank you in advance