8000 Modify cas logout url,use admin url in keycloak client configuration. by cnxieyang · Pull Request #8 · Doccrazy/keycloak-protocol-cas · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
This repository was archived by the owner on Oct 12, 2020. It is now read-only.

Modify cas logout url,use admin url in keycloak client configuration. #8

Open
wants to merge 7 commits into
base: master
Choose a base branch
from

Conversation

cnxieyang
Copy link

In keycloak client config page.we know.URL to the admin interface of the client. Set this if the client supports the adapter REST API. This REST API allows the auth server to push revocation policies and other administrative tasks. Usually this is set to the base URL of the client.

@Doccrazy
Copy link
Owner
Doccrazy commented Sep 8, 2018

Thank you for your contribution, and sorry for the late response!

Why is this change necessary? According to the CAS protocol specification:

The message is delivered or the redirection is sent to the URL presented in the service parameter of the original CAS protocol ticket request.

In the context of this plugin, the service parameter is mapped to the redirect URI of the client and logout should thus match the spec.
Can you elaborate why the current code fails for your setup? Single Logout is largely untested, so you are likely correct, but I would like to understand the reason behind this change.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants
0