The username and password pair are casuser and Mellon in the default settings of CAS. cas/application.properties at 6.4.x · apereo/cas You can't perform that action at this time. You signed in with another tab or window. You signed out in another tab or…github.com This password is an analog from The Lord of the Rings in my opinion. While the fellowship are trying to reach Mordor, they find their way to the mines of Moria (khazad-dum), and they must open the secret door to enter it. It says “speak ‘friend’ and enter” on the secret door. This is a kind of passphrase. Frodo asks Gandalf that what “friend” means in elvish (elf language), and he gets the answer “Mellon”. When you say “Mellon” to the secret door, the gate opens.

OpenAPI provides a specification for creating informative, readable, easy-to-follow Rest API documentation. On the Spring side, there are Springfox and Springdoc implementations for this. API documentation is automatically generated from the code by using these libraries in the application startup. Swagger provides an user interface using this information. Springfox doesn’t…

After long research, you decided to use Apereo CAS as a Single Sign-on solution. It will tell you when you go to the source code on Github. So you change your direction to the CAS overlay template repository. This repository is a minimal version of CAS and provides great convenience…

I have mentioned that reactive spring client cannot be integrated using the cas-client library before. Because cas-client doesn’t support reactive, so i have explained the way to integrate using OpenID Connect. (https://dgempiuc.medium.com/spring-cloud-gateway-and-apereo-cas-integration-fbb6d5c8440c) { "@class" : "org.apereo.cas.support.oauth.services.OAuthRegisteredService", ... "description": "Spring Cloud Gateway client", "logoutUrl" : "http://gateway-url/oidc/logout", ... }

Since the WebSocket is a low-level protocol, there is needed lots of extra codes to write applications. By using subprotocol, it is possible at high-level by writing less code. Client and server agree on a messaging protocol over the “Sec-WebSocket-Protocol” header during handshake. Spring Framework supports the use of STOMP…

While everything is going well at the beginning of the project, many code violations are caused as the use cases become more complex and experienced developers leave and are replaced by new ones. In order to prevent them, code standards are set to ensure that everyone in the project speaks…

If you have integrated the security of Spring Cloud Gateway with OAuth2 Authorization Code grant type, let me start by reminding this flow. if a unauthenticated user sends a request to the Spring Cloud Gateway, user will get a response with a 302 return code indicating that user must log…

Probably, the most known logging pipeline is the Elasticsearch-Logstash-Kibana stack. We used to use this pipeline in our own projects until last year, but now we are using Elasticsearch-Filebeat-Kibana, removing Logstash. 1. Why? The main use case of Logstash is sending logs from source to multiple destination. For example, from application to…

In this article, I will talk about how to deploy CAS application to the kubernetes environment and some tricks about the problems I encountered during this deployment. The main topics will be kubernetes manifest files (deployment, service, ingress controller and secret) and SSL offloading. Apereo CAS If you’re looking at this tutorial…