CAS Service Registry

[Cantor, Scott]

On 4/10/15, 1:55 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>EndpointType defines Location as an xs:anyURI.   Is there some sort of URI type that allows specification of regex?  I've never heard of one, but maybe there is.  Offhand doesn't seem like the obvious simple thing (a plain regex matching an HTTP/HTTPS URL) would be legal there.

There are two workarounds:

- Encode something into a URI (path maybe?)
- Stick a constant URI in Location and define an extension attribute to carry the pattern

The latter would be a schema, but a very small one.

The latter is probably more elegant/clean, and allows fall back to just Location if the CAS client in question didn't in fact need a bunch of service URLs.

And again the matching rules are arbitrary. You could define things such that the URL in Location was a "base" and that anything prefixed it by it was a match, which means you don't need a regex for parameters are whatever.

The only reason SAML doesn't allow for that is that it was a deliberate decision not to, to avoid people carrying extra information into SAML endpoints and subverting the binding.

-- Scott