POST /cas/v1/tickets HTTP/1.0

username=battags&password=password&additionalParam1=paramvalue

201 Created
Location: http://www.whatever.com/cas/v1/tickets/{TGT id}

POST /cas/v1/tickets/{TGT id} HTTP/1.0

service={form encoded parameter for the service url}

200 OK

ST-1-FFDFHDSJKHSDFJKSDHFJKRUEYREWUIFSD2132

DELETE /cas/v1/tickets/TGT-fdsjfsdfjkalfewrihfdhfaie HTTP/1.0

<servlet>
	<servlet-name>restlet</servlet-name>
	<servlet-class>com.noelios.restlet.ext.spring.RestletFrameworkServlet</servlet-class>
	<load-on-startup>1</load-on-startup>
</servlet>

<servlet-mapping>
	<servlet-name>restlet</servlet-name>
	<url-pattern>/v1/*</url-pattern>
</servlet-mapping>

<dependency>
	<groupId>org.jasig.cas</groupId>
	<artifactId>cas-server-integration-restlet</artifactId>
	<version>${cas.version}</version>
	<type>jar</type>
</dependency>

#!/usr/bin/python
import os.path
import httplib, urllib, urllib2, cookielib

# 1. Grab the Ticket Granting Ticket (TGT)


cas_host = "cas.acme.com"
rest_endpoint = "/cas/v1/tickets/"
params = urllib.urlencode({'username': 'battags', 'password': 'password'})
headers = {"Content-type": "application/x-www-form-urlencoded", "Accept": "text/plain", "User-Agent":"python" }
conn = httplib.HTTPSConnection(cas_host)
conn.request("POST", rest_endpoint, params, headers)
response = conn.getresponse()
print response.status, response.reason
data = response.read()
location = response.getheader('location')
#  Pull off the TGT from the end of the location, this works for CAS 3.3-FINAL
tgt = location[location.rfind('/') + 1:]
conn.close()

print location
print tgt
print "***"

# 2. Grab a service ticket (ST) for a CAS protected service

document = '/secure/blah.txt'
service  = 'http://docs.acme.com%s' % (document)

params = urllib.urlencode({'service': service })
conn = httplib.HTTPSConnection(cas_host)
conn.request("POST", "%s%s" % ( rest_endpoint, tgt ), params, headers)
response = conn.getresponse()
print response.status, response.reason
st = response.read()
conn.close()

print "service: %s" % (service)
print "st     : %s" % (st)
print "***"

# 3. Grab the protected document

url  = "%s?ticket=%s" % ( service, st )  # Use &ticket if service already has query parameters
print "url    : %s" % (url)

cj = cookielib.CookieJar()

# no proxies please
no_proxy_support = urllib2.ProxyHandler({})
# we need to handle session cookies AND redirects
cookie_handler = urllib2.HTTPCookieProcessor(cj)

opener = urllib2.build_opener(no_proxy_support, cookie_handler, urllib2.HTTPHandler(debuglevel=1))
urllib2.install_opener(opener)
protected_data = urllib2.urlopen(url).read()
print protected_data

#!/usr/bin/python
import os.path
import httplib, urllib, urllib2, cookielib

# Spring security protected urls do not consume the service ticket if it is present on the document url, so a slightly different approach is required

# 1. Grab the Ticket Granting Ticket (TGT)

params = urllib.urlencode({'username': 'enter-it-here', 'password': 'enter-it-here'})
headers = {"Content-type": "application/x-www-form-urlencoded", "Accept": "text/plain"}
conn = httplib.HTTPSConnection("cas.acme.com")
conn.request("POST", "/cas/v1/tickets/", params, headers)
response = conn.getresponse()
print response.status, response.reason
data = response.read()
location = response.getheader('location')
# Pull off the TGT from the end of the location, this works for CAS 3.4.11
tgt = location[location.rfind('/') + 1:]
conn.close()
 
print location
print tgt
print "--------------"
 
# 2. Grab a service ticket (ST) for a CAS protected service which directs to a service ticket consumption page. Spring Security does this, for example.
document = 'http://docs.acme.com/secure/blah.txt'

# Spring security default service ticket consumption page
service = 'http://docs.acme.com/secure/j_spring_cas_security_check'

params = urllib.urlencode({'service': service })
conn = httplib.HTTPSConnection("cas.acme.com")
conn.request("POST", "/cas/v1/tickets/%s" % ( tgt ), params, headers)
response = conn.getresponse()
print response.status, response.reason
st = response.read()
conn.close()
 
print "service: %s" % (service)
print "st : %s" % (st)
print "--------------"
 
url = "%s?ticket=%s" % ( service, st ) # Use &ticket if service already has query parameters
print "url : %s" % (url)
 
cj = cookielib.CookieJar()
 
# no proxies please
no_proxy_support = urllib2.ProxyHandler({})
# we need to handle session cookies AND redirects
cookie_handler = urllib2.HTTPCookieProcessor(cj)
 
opener = urllib2.build_opener(no_proxy_support, cookie_handler, urllib2.HTTPHandler(debuglevel=1))
urllib2.install_opener(opener)
print "Establishing application session via service ticket consumption url..."
st_response = urllib2.urlopen(url).read()

# 3. Now we can grab the protected document

print "Retrieving document..."
protected_data = urllib2.urlopen(document).read()
print protected_data[:100]

# This file is used to store the Ticket Getting Ticket
rm tgt.txt

# This file is used to store the Service Ticket
rm serviceTicket.txt

#This file is used to store the service call response
rm response.txt

export CAS_LOGIN_URL=http://localhost:8080/cas/v1/tickets
export GET_URL=http://localhost:8080/service
export USERNAME=username
export PASSWORD=password

# Request a new Ticket Getting Ticket (TGT).  This returns HTML which is put into tgt.txt.
wget --no-check-certificate -O tgt.txt --post-data="username=$USERNAME&password=$PASSWORD" $CAS_LOGIN_URL

# Extract from the HTML the TGT and put back into tgt.txt
echo TGT`grep -oEi 'action=\".*\"' tgt.txt | grep -oEi '\-.*\-cas'` > tgt.txt

# display the TGT
cat tgt.txt

# Request a new Service Ticket and store in serviceTicket.txt
wget --no-check-certificate --post-data="service=$GET_URL" -O serviceTicket.txt $CAS_LOGIN_URL/`cat tgt.txt`

# Get the data at from the service at GET_URL and store in response.txt
wget --no-check-certificate -O response.txt $GET_URL?ticket=`cat serviceTicket.txt`

# Display the data from the service call
cat response.txt

@Grab("commons-httpclient:commons-httpclient:3.1")
import java.io.IOException
import java.util.logging.Logger
import java.util.regex.Matcher
import java.util.regex.Pattern
import org.apache.commons.httpclient.HttpClient
import org.apache.commons.httpclient.NameValuePair
import org.apache.commons.httpclient.methods.PostMethod
import org.apache.commons.httpclient.methods.GetMethod
import org.apache.commons.httpclient.methods.DeleteMethod
class Client
{
  static final Logger LOG = Logger.getLogger(Client.class.getName())
  String getServiceTicket(String server, String ticketGrantingTicket, String service)
  {
    if (!ticketGrantingTicket)
      return null
    HttpClient client = new HttpClient()
    PostMethod post = new PostMethod("$server/$ticketGrantingTicket")
    post.setRequestBody([new NameValuePair("service", service)].toArray(new NameValuePair[1]))
    try
    {
      client.executeMethod(post)
      String response = post.getResponseBodyAsString()
      switch (post.getStatusCode())
      {
        case 200:
          return response
        default:
          LOG.warning("Invalid response code ( $post.getStatusCode() ) from CAS server!")
          LOG.info("Response (1k): " + response.substring(0, Math.min(1024, response.length())))
          break
      }
    }
    catch (final IOException e)
    {
      LOG.warning(e.getMessage())
    }
    finally
    {
      post.releaseConnection()
    }
    return null
  }
  String getTicketGrantingTicket(String server, String username, String password)
  {
    HttpClient client = new HttpClient()
    PostMethod post = new PostMethod(server)
    post.setRequestBody([new NameValuePair("username", username),new NameValuePair("password", password)].toArray(new NameValuePair[2]))
    try
    {
      client.executeMethod(post)
      String response = post.getResponseBodyAsString()
      switch (post.getStatusCode())
      {
        case 201:
          Matcher matcher = Pattern.compile(".*action=\".*/(.*?)\".*").matcher(response)
          if (matcher.matches())
            return matcher.group(1)
          LOG.warning("Successful ticket granting request, but no ticket found!")
          LOG.info("Response (1k): " + response.substring(0, Math.min(1024, response.length())))
          break
        default:
          LOG.warning("Invalid response code ($post.getStatusCode()) from CAS server!")
          LOG.info("Response: $response")
          break
      }
    }
    catch (final IOException e)
    {
      LOG.warning(e.getMessage())
    }
    finally
    {
      post.releaseConnection()
    }
    return null
  }
  void notNull(Object object, String message)
  {
    if (object == null)
      throw new IllegalArgumentException(message)
  }
  void getServiceCall(String service, String serviceTicket) {
      HttpClient client = new HttpClient()
      GetMethod method = new GetMethod(service)
      method.setQueryString([new NameValuePair("ticket", serviceTicket)].toArray(new NameValuePair[1]))
      try
      {
        client.executeMethod(method)
        String response = method.getResponseBodyAsString()
        switch (method.getStatusCode())
        {
          case 200:
            LOG.info("Response: $response")
            break
          default:
            LOG.warning("Invalid response code (" + method.getStatusCode() + ") from CAS server!")
            LOG.info("Response: $response")
            break
        }
      }
      catch (final IOException e)
      {
        LOG.warning(e.getMessage())
      }
      finally
      {
          method.releaseConnection()
      }
  }
  void logout(String server, String ticketGrantingTicket) {
      HttpClient client = new HttpClient()
      DeleteMethod method = new DeleteMethod("$server/$ticketGrantingTicket")
      try
      {
        client.executeMethod(method)
        switch (method.getStatusCode())
        {
          case 200:
            LOG.info("Logged out")
            break
          default:
            LOG.warning("Invalid response code (" + method.getStatusCode() + ") from CAS server!")
            LOG.info("Response: $response")
            break
        }
      }
      catch (final IOException e)
      {
        LOG.warning(e.getMessage())
      }
      finally
      {
          method.releaseConnection()
      }
  }
  public static void main(String[] args)
  {
        String server = "http://localhost:8080/cas/v1/tickets"
        String username = "username"
        String password = "password"
        String service = "http://localhost:8080/service"
        Client client = new Client()
        String ticketGrantingTicket = client.getTicketGrantingTicket(server, username, password)
        println "TicketGrantingTicket is $ticketGrantingTicket"
        String serviceTicket = client.getServiceTicket(server, ticketGrantingTicket, service)
        println "ServiceTicket is $serviceTicket"
        client.getServiceCall(service, serviceTicket)
        client.logout(server, ticketGrantingTicket)
  }
}