Ryan's Tech Blog » CAS http://ryepup.unwashedmeme.com/blog mostly tech, mostly rants Wed, 04 Jan 2012 03:42:20 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 CAS Authentication in C# http://ryepup.unwashedmeme.com/blog/2007/06/19/cas-authentication-in-c/ http://ryepup.unwashedmeme.com/blog/2007/06/19/cas-authentication-in-c/#comments Tue, 19 Jun 2007 19:22:42 +0000 ryan http://ryepup.unwashedmeme.com/blog/2007/06/19/cas-authentication-in-c/ For a recent project I wanted to authenticate using Central Authentication Service (CAS), a single-sign on server deployed world-wide. My project is in ASP.NET, so I hunted down CASP, a C# class produced by John Tantalo at Case Western Reserve University. Coincidentally, John was also responsible for Planarity, a flash game which has only stolen mere days of my life.

I had a few nits to pick with it, so at the risk of calling his baby ugly:

  1. Doesn't handle the latest CAS protocol, CAS2
  2. Dumps the authenticated username into Session, which isn't what I wanted
  3. Doesn't use "using" statements when dealing with IDisposable objects
  4. Doesn't use XML comments, which .NET tools prefer
  5. Some minor duplication in specifying the login URL and the validation URL.

So, all in all nothing really big. I ended up going a little nuts with it resolving all my complaints. It can now speak CAS1 or CAS2, and has a bunch of options that I added in to solve my specific needs. It seems a little overcomplicated now, but I always get that feeling when I'm thinking in C#.

Installation

Pretty simple:

  1. Download the source: CASP.cs (BSD license)
  2. Add it to your project

Example usage

Like Tantalo's CASP, mine is designed to be used from a System.Web.UI.Page, and will redirect the browser about as needed.

Simplest example, uses CAS2 by default

PLAIN TEXT
C#:
  1. protected void Page_Load(object sender, EventArgs e) {
  2.   string username = CASP.Authenticate("https://login.case.edu/cas/", this.Page);
  3.   //do whatever with username
  4. }

Slightly more complex, using CAS1 and always renewing the authentication ticket

PLAIN TEXT
C#:
  1. protected void Page_Load(object sender, EventArgs e) {
  2.   string username = CASP.Authenticate("https://login.case.edu/cas/", this.Page, true, false);
  3.   //do whatever with username
  4. }

Most complex example, giving you flexibility to decide what to do about errors, etc

PLAIN TEXT
C#:
  1. protected void Page_Load(object sender, EventArgs e) {
  2.   CASP casp = new CASP("https://login.case.edu/cas/", this.Page, true); //re-login every time
  3.   if (casp.Login()) {
  4.     try {
  5.       string username = casp.ServerValidate(); //or casp.Validate() for CAS1
  6.       //do whatever with username
  7.     }catch (CASP.ValidateException ex) {
  8.       //try again, something was messed up
  9.       casp.Login(true);
  10.     }
  11.   }
  12. }

This code is certified:
works on my machine

]]> http://ryepup.unwashedmeme.com/blog/2007/06/19/cas-authentication-in-c/feed/ 2