CAS and a Servlet accessed programmatically

[Scott Battaglia]

Hi,

We created a servlet that is supposed to be access programmatically vs. via a web browser. We want to protect it using the features available to protecting web services via Acegi, i.e. the stuff detailed under Advanced CAS Usage.

I have written code that will retrieve a ticket to be sent. However, I am struggling with the set up that should be used to handle this. I set up the application to use CAS, but obviously it just tries to redirect to the CAS login :).

Is what I want to do possible outside of the normal web service paradigm? If so, what additional set up do I need?

Thanks
-Scott

[Ben Alex]

Sounds like you're on the right track, but need to switch the SecurityEnforcementFilter.authenticationEntryPoint from CasProcessingFilterEntryPoint to BasicProcessingFilterEntryPoint.

[Scott Battaglia]

Thanks, that did the trick!