topic CAS SSO for REST client in Nuxeo Forum

CAS SSO for REST client

Pradeep_Bhat — Tue, 23 Feb 2016 12:15:24 GMT

Hi Folks, We have implemented CAS-SSO between Liferay and Nuxeo applications. We want to upload documents from Liferay to Nuxeo via REST client. So in this case, the user has already logged into the Liferay web application. How to bypass the REST API authentication to upload the document programatically? The below question resembles my concern. https://answers.nuxeo.com/general/q/7bbc4ee4f021429cb87c4fce1d378636/use-PhpAutomationClient-with-CAS I have tried with portal_auth and all. But couldn't solve the issue.

Re: CAS SSO for REST client

pibou_Bouvret — Tue, 23 Feb 2016 12:31:50 GMT

you could use CAS Proxy features so that the portal acts on behalf of the authenticated user (used for IMAP for instance).

It might be a bit heavy for stateless access (though the example in Nuxeo doc mentions "The portal saves the client context for being able to invoke Nuxeo using the same HTTP session".)

You could also take a look at PORTAL Auth and impersonate the connected user (login retrieved from CAS).