November 2017
Intermediate to advanced
542 pages
14h 24m
English
Now that we have modified the CAS server to return custom attributes, we'll experiment with another capability of the Spring Security CAS integration—the ability to populate UserDetails from the CAS assertion itself! This is actually as simple as switching the AuthenticationUserDetailsService implementation to the o.s.s.cas.userdetails.GrantedAuthorityFromAssertionAttributesUserDetailsService object, whose job it is to read the CAS assertion, look for a certain attribute, and map the value of that attribute directly to the GrantedAuthority object for the user. Let's assume that there is an attribute entitled role that will be returned with the assertion. We'll simply configure a new ...
Read now
Unlock full access