Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backchannel logout not working due to invalid client session note set #129

Closed
malinowskij opened this issue Oct 29, 2024 · 1 comment
Closed
Labels
resolution: fixed Issue has been fixed type: bug Something isn't working

Comments

@malinowskij
Copy link
Contributor

malinowskij commented Oct 29, 2024

After many tests I am unable to trigger backchannel logout.

I have debugged the plugin code and have come to the following conclusions:

  1. In the CASLoginProtocol class, the tickeet is retrieved from the client session notes
  2. However, during validateService the ticket is set with the ticket prefix key, i.e. "ST-", instead of "service_ticket" (AbstractValidateEndpoint:154)

obraz

Looking at the commit history, you can see the change:
obraz

This causes serviceTicket to always be null.

@Stelmach83
Copy link

@jacekkow please take a loot at this

malinowskij added a commit to malinowskij/keycloak-protocol-cas that referenced this issue Oct 30, 2024
malinowskij added a commit to malinowskij/keycloak-protocol-cas that referenced this issue Oct 30, 2024
@jacekkow jacekkow added type: bug Something isn't working resolution: fixed Issue has been fixed labels Oct 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
resolution: fixed Issue has been fixed type: bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants