ftw.casauth 1.7.1

Plone PAS plugin for authentication against CAS.

Contents

• Introduction

• Installation

• Links

• Copyright

• Changelog

  • 1.7.1 (2024-07-30)

  • 1.7.0 (2024-04-19)

  • 1.6.1 (2023-09-18)

  • 1.6.0 (2023-08-15)

  • 1.5.0 (2023-01-23)

  • 1.4.2 (2021-09-13)

  • 1.4.1 (2021-06-14)

  • 1.4.0 (2021-05-27)

  • 1.3.1 (2021-02-05)

  • 1.3.0 (2020-06-02)

  • 1.2.0 (2018-07-17)

  • 1.1.0 (2016-10-13)

  • 1.0.0 (2015-11-25)

Introduction

This product provides a PAS plugin for authentication of users in Plone against a CAS (Central Autentication Server).

It currently supports CAS 2.0 and CAS 3.0 protocols.

Installation

Add ftw.casauth to the list of eggs in your buildout, run buildout and restart your instance.

In the ZMI navigate to your acl_users folder and add a CAS Authentication Plugin. You must provide the url of your CAS server, e.g. https://cas.server.net. Then activate the Challenge, Extraction and Authentication functionality.

Links

• Github: https://github.com/4teamwork/ftw.casauth

• Issues: https://github.com/4teamwork/ftw.casauth/issues

Copyright

This package is copyright by 4teamwork.

ftw.casauth is licensed under GNU General Public License, version 2.

Changelog

1.7.1 (2024-07-30)

• Fix getting internal CAS server url if plugin was installed with version < 1.7.0. [buchi]

1.7.0 (2024-04-19)

• Allow to configure the CAS server url with the environment variable FTW_CASAUTH_CAS_SERVER_URL. [buchi]

• Add and use internal CAS server url for ticket validation. [buchi]

1.6.1 (2023-09-18)

• Fix again login with invalid ticket using REST API, which could lead to authenticate the wrong user. Bug was reintroduced in 1.6.0. [buchi]

1.6.0 (2023-08-15)

• Lookup users by username (login) instead of userid. [buchi]

1.5.0 (2023-01-23)

• Add Support for Python 3 and Plone 5.2. [lgraf]

1.4.2 (2021-09-13)

• Raise a 401 if the user to log in does not exist. [elioschmutz]

1.4.1 (2021-06-14)

• Fix login with invalid ticket, which could lead to authenticate the wrong user. [buchi]

1.4.0 (2021-05-27)

• Add support for cookie based authentication when using REST API. [buchi]

• Drop support for Python < 2.7.9. [buchi]

• Use Python’s built-in HTTPS handler which enables support for TLS 1.2 and uses CA certificates provided by the OS. [buchi]

1.3.1 (2021-02-05)

• Preserve multi-valued QS params when stripping ticket from service URL. [lgraf]

1.3.0 (2020-06-02)

• Handle login similar to PlonePAS (fire login events, expire clipboard, create member area and set login times) in @caslogin endpoint. [tinagerber]

1.2.0 (2018-07-17)

• Add plone.restapi endpoint for login. [buchi]

• Add Plone 5 compatibility. [phgross]

1.1.0 (2016-10-13)

• Handle login similar to PlonePAS (fire login events, expire clipboard, create member area and set login times). [phgross]

• Avoid having the ticket param end up in the browser address bar by stripping it from the service_url, and redirecting to the service_url after extracting credentials (i.e., a ticket) from the request. [lgraf]

1.0.0 (2015-11-25)

• Initial release. [buchi]