Starting with the patched https://source.jasig.org/sandbox/cas-password-policy/tags/cas-server-support-ldap-pwd-expiration-3.4.8/ I pulled in all the changes from CAS Server 3.4.10. These are my merge notes.
Resources
The LPPE module currently has files under /src/main/resources/ that map to cas-server-webapp/src/main/webapp/. These files could be applied via Maven Overlay if they were in the right directory.
...
Code Block |
---|
change: <decision-state id="warn"> <if test="flowScope.warnCookieValue" then="showWarningView" else="PasswordWarningCheck" /> </decision-state> |
Additions:
Code Block |
---|
<!-- this checks the status of a password --> <action-state id="PasswordWarningCheck"> <evaluate expression="PasswordWarningCheckAction" /> <transition on="showWarning" to="warnPassRedirect" /> <transition on="success" to="redirect" /> <transition on="error" to="viewLoginForm" /> </action-state> <!-- The "warnPassRedirect" end state is the end state for when the user's password is close to expiring. They are not required to change their password to reach the requested service. --> <action-state id="warnPassRedirect" > <evaluate expression="flowScope.service.getResponse(requestScope.serviceTicketId)" result-type="org.jasig.cas.authentication.principal.Response" result="requestScope.response" /> <transition on="requestScope.response" to="pwdPostView" /> <transition to="pwdRedirectView" /> </action-state> <end-state id="pwdPostView" view="postWarnPassResponseView"> <output name="viewScope.parameters" value="requestScope.response.attributes" /> <output name="viewScope.expireDays" value="flowScope.expireDays" /> <output name="viewScope.originalUrl" value="flowScope.service.id" /> </end-state> <!-- The "showExpiredPassView" end state is the end state for when the user's password has expired and they must be sent to the account management page to change their password. --> <end-state id="showExpiredPassView" view="casExpiredPassView" /> <!-- The "showAccountLockedView" end state is the end state for when the user's account has been locked out due to password failures. They are told to try again in 15 minutes. --> <end-state id="showAccountLockedView" view="casAccountLockedView" /> <!-- The "showAccountDisabledView" end state is the end state for when the user's account has been disabled. They are not allowed to reach any services and must call the Help Desk to re-enable service --> <end-state id="showAccountDisabledView" view="casAccountDisabledView" /> <!-- The "showMustChangePassView" end state is the end state for when the user must change his password and then must be sent to the account management page. --> <end-state id="showMustChangePassView" view="casMustChangePassView" /> <!-- The "showBadHoursView" end state is the end state for when the user cannot log in at this time. --> <end-state id="showBadhoursView" view="casBadHoursView" /> <!-- The "showBadWorkstation" end state is the end state when the user cannot log in from this worstation (hum, the server indeed) --> <end-state id="showBadWorkstationView" view="casBadWorkstationView" /> <end-state id="pwdRedirectView" view="casWarnPassView"> <output name="viewScope.parameters" value="requestScope.response.attributes" /> <output name="viewScope.serviceTicketId" value="requestScope.serviceTicketId" /> <output name="viewScope.expireDays" value="flowScope.expireDays" /> <output name="viewScope.originalUrl" value="flowScope.service.id" /> </end-state> |