CAS SLO not working
See original GitHub issueImplemented the slo as per the doc but CAS Single Logout is not working as expected.
APP1: node app implemented connect-cas2 APP2: spring webapp implemented CAS java config
Both APP1 and APP2 used the same CAS.
When I logged out from APP1, APP2 also getting logged out. But when I logged out from APP2, APP1 is still accessible.
Below is my connect-cas2 configuration:
{
servicePrefix:"http://localhost:8080",
serverPath: "https://localhost:8443/cas",
paths: {
validate: '/app-client',
serviceValidate: '/serviceValidate',
proxy: '',
login: '/login',
logout: '/logout',
proxyCallback: ''
},
redirect: false,
gateway: false,
renew: false,
slo: true,
fromAjax: {
header: 'x-client-ajax',
status: 418
}
}
Issue Analytics
- State:
- Created 6 years ago
- Comments:8 (2 by maintainers)
Top Results From Across the Web
CAS Single LogOut(SLO) not working - CAS 4.2.3
I am having issues with Single LogOut in CAS. I am using CAS server 4.2.3 and Spring 3.2. My client casified applications are...
Read more >How to get SLO to work in CAS 5?
Hi. My team is working with CAS (5.2.3) and delegated SAML authentication via pac4j libraries. What we have so far:.
Read more >CAS - Troubleshooting Guide - Apereo Blog
When changes are applied, restart the server environment and observe the log files to get a better understanding of CAS behavior. For more...
Read more >SLO not working · Issue #287 · apereo/phpCAS
According to manual if i log out in cas a post request to a given url is coming to inform other services that...
Read more >Central Authentication Service (CAS) Single Logout (SLO ...
Central Authentication Service (CAS) Single Logout (SLO) Work Flow ... With Single Logout (SLO), user gets logged out not only from the CAS...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
@yuyongyu08 I have already created a PR long back.
@xiaoyuze88 can you review it, if it is the standard way to solve.
I solved this problem by this way, but I’m not sure it is standard or not. change
if (!/<samlp:SessionIndex>(.*)<\/samlp:SessionIndex>/.exec(body))
toif (!/<samlp:SessionIndex>(.*)<\/samlp:SessionIndex>/.exec(decodeURIComponent(body)))