Consumed tickets

[jbittel]

Consumed tickets

[jbittel]

A service ticket is intended to be used only once by design, as part of the authentication negotiation between the client and the server. Once successfully authenticated, the user is logged in with a standard Django session and the session duration is controlled by Django (the default is two weeks). The ticket is consumed as part of that process for security, to ensure it cannot be reused by that user or anyone else.

If you're having to log in every time you hit a SSO configured site, check to make sure the authentication is succeeding and the sessions are being created as expected. You can use the stock ModelBackend to take CAS completely out of the picture and verify behavior.

Thanks!

[alexsilva]

I was unsure how the project worked, but this solved django-cas-consumer