CAS proxy validation failing

[Cantor, Scott]

On 3/5/19, 1:32 AM, "users on behalf of Andrew Morgan" <users-bounces at shibboleth.net on behalf of morgan at orst.edu> wrote:

> If I wanted to override the proxyHttpClient bean by creating a 
> HttpClientBuilder bean, how would I do that?  Do I just create a bean with
> the same id in conf/cas-protocol.xml?

That's very sensitive to file order, we don't generally rely on that to allow injection of beans into system code, we define specific beans to define that we can detect and conditionally support. Based on that, I don't think it's yet a supported feature, it would mean changing the system file. I would suggest filing a RFE on that. All uses of HttpClient need to be explicitly overrideable (and this kind of case is why).

> I don't see any uses of HttpClientBuilder in the configuration files of Shibboleth

That NonCachingHttpClient bean the CAS wiring is using is an HttpClientBuilder (actually a factory bean that wraps one). But that specific property for redirects isn't exposed right now and after re-reviewing all that code, I don't think it's something that can be controlled right now.

It's getting redone somehow for V4, we have a bunch of limitations around this kind of thing that need to get cleaned up.

-- Scott