Vert.x CAS Auth

This is a simple example of CAS integration with the vertx Yoke middleware. When accessing the /authservice, the app will check the session for:

a sessionId in the request
a matching sessionId in the SessionStorage
a auth boolean on the sessionId in the SessionStorage
a CAS ticket

If the sessionId is not marked as "auth" in the SessionStorage system, it will check the request for the CAS ticket. If a ticket is found its queried against the CAS server for the requested service / URI, if the ticket is not valid or does not exist, the request is redirected to CAS for authentication.

Requirements

This example requires a running CAS server, see cas-server subdirectory for a example of a very simple CAS setup which only contains a single static user:

username casuser
password Mellon

Config

{
  "main":"com.deblox.cas.CasHttpService", // main class to boot
  "casHost": "localhost", // hostname the casClient should use to reach CAS
  "casPort": 8443, // port the casClient should use
  "cas_redirectUrl": "https://localhost:8443/cas", // used in redirects, NO trails!
  "keepAlive": true, // keep connection to Cas Alive or not.
  "trustAll": true, // allows self-signed certs for DEV
  "ssl": true,
  "webroot": "static" // static dir in classpath or full OS path
}

URLS

http://localhost:3000/authservice
http://localhost:3000/openservice

Running

./gradlew run -i

SessionStorage

A simple SessionStorage is implemented as a ConcurrentMap with some basic Expiry support.