Jasig/cas — pull request #439 by mmoayyed (2014-06-05 18:34:04+00:00)
Title: CAS-1457: Authorization of pgtUrls for proxy AuthN

Presently, the proxy configuration of a given service is applied globally to all requests. When checking the registry, the PGT will be given to any https URL as long as the service URL matches a service in the registry which is marked as allowedToProxy.

This pull makes sure that a proxying policy can be defined per service to alternate this behavior. There are two policies:

## RefuseRegisteredServiceProxyPolicy
As the name suggests, and is the default, equivalent to allowedToProxy=false regardless of what the pgtUrl is.

## RegexMatchingRegisteredServiceProxyPolicy
A policy that defines the set of accepted callback urls for this service using pattern matching.

Example configuration for a service...

### Accept everything:

```xml

```

### Accept only matching urls:

```xml

```

More context at:
https://issues.jasig.org/browse/CAS-1457