Spring Security 4.2.1.RELEASE + SSO CAS (jasig 4.0.3)

Question

Spring Security 4.2.1.RELEASE + SSO CAS (jasig 4.0.3)

Navigation

#1 by (0 votes)

0

I'm using CAS (Jasig) with three applications, when I log out of one of the applications I end the session of the same and the CAS, but if I access another application that was already a session open via URL, the session stay alive How do I kill all active sessions in my CAS-bound application pool?

Example:

CAS
APPLICATION A
APPLICATION B
APPLICATION C

Application logout A terminates itself and CAS, but keeps sessions alive from applications B and C.

I tried to capture the cookie created by CAS so I can develop a logout filter to see if it has an active session, but I could not capture it.

Has anyone ever been in a similar situation?

spring spring-security

asked by anonymous 08.05.2017 / 22:08

1 answer

How to insert a bookmark that grows numerically in a dataframe in R? How to block JavaScript Scroll function in different screen widths

score 0 · Answer 1

I found the solution to the problem, when the CAS will log out it will execute a certain URL to inform all linked systems that it should kill the session. But as I'm using Spring Security Cross Site Request Forgery (CSRF) was blocking this request. After allowing it to do the same the problem was solved.