Jasig/mod_auth_cas — pull request #44 by jgoguen (2012-08-23 18:49:08+00:00)
Title: Regex matching for 'Require cas-attribute'

This allows using regular expressions for matching cas-attribute directives. Currently, if I have SAML returning eduPersonEntitlement "urn:mace:inst.edu:helpdesk?mod=1&phone=admin&supervisor=1" there's no way for me to say "allow anyone with the helpdesk entitlement even if they have no attributes". This patch allows saying "Require cas-attribute eduPersonEntitlement~.+:helpdesk\??.*" (or similar) and also enables (for example) supervisor-only authz with a line similar to ""Require cas-attribute eduPersonEntitlement~.+:helpdesk\?.*supervisor=1.*"