topic Re: Logout with cas in Alfresco Archive

Logout with cas

litllel — Thu, 19 May 2016 14:03:45 GMT

Hello guys, I have my CAS enable on my alfresco, but when SSO is enable, the button to logout is disable, how can I reenable it in order to be able to logout from my share and from my cas without having to clear my history each time.

Re: Logout with cas

afaust — Fri, 20 May 2016 07:47:27 GMT

Logging out from CAS is not really possible from inside Alfresco. You need to have a special UI or URL of your CAS that provides "log out" functionality. If your CAS provides such an UI or URL, you could customize the Alfresco Share header to have a menu item "Logout via CAS" in the menu (alternative to the disabled standard logout), which redirects to that CAS logout UI or URL.

Re: Logout with cas

litllel — Fri, 20 May 2016 13:12:00 GMT

Ok, Thank you I will look out for this. I think I have to customize the share-header.lib.js. to reenable the logout button but how can I redirect my URL to my cas logout.

Re: Logout with cas

abhishek2341 — Sat, 21 May 2016 10:22:44 GMT

Hi
how did u integrate the alfresco Via cas. kindly share any POC or steps ??

Re: Logout with cas

idwright — Mon, 23 May 2016 08:28:44 GMT

This is slightly complicated…

First you need to put back the logout menu option, that's relatively straightforward.
Then you need to replace the LogoutService so that you can pass the redirectURLQueryKey (and redirectURLQueryValue) to the logout servlet, complicated by the fact that the servlet doesn't understand JSON.
Probably the easiest thing to do is look at my github - https://github.com/wrighting/alfresco-cas
There's some explanation in the wiki as well as the code.
(It's different for earlier versions….)

Re: Logout with cas

litllel — Mon, 23 May 2016 13:46:40 GMT

I have alfresco-community 5.1, and I don't understand how to add the logoutService in it, I found how to reenable the button to logout, but when I try to make it logout from cas it didn't work so I tryied to create a class to overried the SlingshotLogoutController but I failed to get the Alf_ticket to destroy it at the end cause if i want to use

/api/login/ticket/‍

I need the password of the user, and i don't think it's secure to use it here in cleartext.

Re: Logout with cas

idwright — Tue, 28 Jun 2016 14:17:30 GMT

You can do it on the java/repo end, the trick is to forward to the CAS logout page, but I prefer to make the changes in share as the servlet will accept the parameters you can use to tell it where to go. (Arguably it would be better to allow these values to be set via properties)

Seenot all the files you need but the main ones)
https://github.com/wrighting/alfresco-cas/blob/master/share-amp/src/main/amp/config/alfresco/web-extension/site-webscripts/org/wrighting/alfresco/usermenu/share-header.get.js
https://github.com/wrighting/alfresco-cas/tree/master/share-amp/src/main/amp/web/js/Authentication