modolabs/Kurogo-Mobile-Web — pull request #44 by adamfranco (2011-12-05 21:10:35+00:00)
Title: CASAuthentication - Support for proxy-authenticated web-service requests

The CAS 2.0 protocol supports proxy-authentication of web-service requests. Proxy authentication allows one web application to access resources (e.g. web services) of another web application on behalf of a user, but without the username or password transmitted between the applications.
https://wiki.jasig.org/display/CAS/Proxy+CAS+Walkthrough

In a proxy-authentication configuration, phpCAS with Kurogo is given a proxy-granting-ticket (PGT) which it can use to obtain a proxy-ticket (PT) that it passes off to underlying web-services secured by CAS. The underlying web-service will validate the PT with the CAS server and obtain the user id and information about the user who logged in to Kurogo without ever seeing the user's password or having to trust that Kurogo authenticated the user correctly.

This patch set includes configuration additions to the `CASAuthentication` class that allow Kurogo to configure the phpCAS library in "proxy" mode. As well, it includes an abstract `CASProxyAuthenticatedDataController` that can be extended to provide access to webservices protected by CAS.