class CasProxyCallbackController
Rails controller that responds to proxy generating ticket callbacks from the CAS
server and allows for retrieval of those PGTs.
Public Instance Methods
receive_pgt()
click to toggle source
Receives a proxy granting ticket from the CAS
server and stores it in the database. Note that this action should ALWAYS be called via https, otherwise you have a gaping security hole. In fact, the JA-SIG implementation of the CAS
server will refuse to send PGTs to non-https URLs.
# File lib/casclient/frameworks/rails/cas_proxy_callback_controller.rb, line 8 def receive_pgt #FIXME: these checks don't work because REMOTE_HOST doesn't work consistently under all web servers (for example it doesn't work at all under mongrel) # ... need to find a reliable way to check if the request came through from a reverse HTTPS proxy -- until then I'm disabling this check #render_error "PGTs can be received only via HTTPS or local connections." and return unless # request.ssl? or request.env['REMOTE_HOST'] == "127.0.0.1" pgtIou = params['pgtIou'] # CAS Protocol spec says that the argument should be called 'pgt', but the JA-SIG CAS server seems to use pgtId. # To accomodate this, we check for both parameters, although 'pgt' takes precedence over 'pgtId'. pgtId = params['pgt'] || params['pgtId'] # We need to render a response with HTTP status code 200 when no pgtIou/pgtId is specified because CAS seems first # call the action without any parameters (maybe to check if the server responds correctly) render :text => "Okay, the server is up, but please specify a pgtIou and pgtId." and return unless pgtIou and pgtId # TODO: pstore contents should probably be encrypted... if Rails::VERSION::MAJOR > 2 casclient = RubyCAS::Filter.client else casclient = CASClient::Frameworks::Rails::Filter.client end casclient.ticket_store.save_pgt_iou(pgtIou, pgtId) render :text => "PGT received. Thank you!" and return end
Private Instance Methods
open_pstore()
click to toggle source
# File lib/casclient/frameworks/rails/cas_proxy_callback_controller.rb, line 43 def open_pstore PStore.new("#{::Rails.root}/tmp/cas_pgt.pstore") end
render_error(msg)
click to toggle source
# File lib/casclient/frameworks/rails/cas_proxy_callback_controller.rb, line 38 def render_error(msg) # Note that the error messages are mostly just for debugging, since the CAS server never reads them. render :text => msg, :status => 500 end