spring-projects / spring-projects/spring-security
SEC-2907: Make CasAuthenticationEntryPoint Ajax friendly
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Sam Hough (Migrated from SEC-2907) said:
We hit the same problem as reported on the forum (linked).
Our Ajax heavy app hits an auth timeout and receives a redirect response but we can't handle it as the browser throws a XML parse exception first.
We have been running with our own version of CasAuthenticationEntryPoint that simply sends an XML tag in the body of the response (along with the redirect) to make the browser happy.
We would really like to roll this into core spring security so we can remove our "patch".
Many thanks
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with CasAuthenticationEntryPoint and trace how an authentication timeout constructs its redirect response. Compare that behavior with the reported custom version that adds an XML tag, then verify the change preserves the redirect while producing an XML-compatible response for Ajax clients.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100