Implement cas encrypted attributes decryption
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 798
- Forks
- 419
- PR merge metrics
- No merged PRs in 30d
Description
I'd love phpCAS to be able to decrypt attributes from CAS server > 4.1, http://jasig.github.io/cas/4.1.x/integration/Attribute-Release.html#encrypting-attributes
It would mean (as well as I understand):
- using some private key stored somewhere
- dunno how to detect which attributes are to be decrypted (specify list with private key ?)
- expose a function to decrypt attribute, or transparently decode them
Unfortunately, I miss time and skills to propose a useable patch here, it's just a whish for now :)
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the CAS 4.1 attribute-release documentation linked in the issue, then locate phpCAS's attribute parsing and configuration entry points. Determine how a private key is supplied and how encrypted attributes are identified. Done means encrypted attributes can be decrypted through a documented, tested behavior without breaking existing attributes.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100