Filter for CAS logout requests

[ceharris]

In CasServletExtension add a filter to the servlet deployment to handle CAS logout. It may be feasible to simply use the JASIG SingleSignOutFilter, by setting its configuration properties. Alternatively, could use the SingleSignOutHandler with our own filter.

[ceharris]

Can't use the the SingleSignOutFilter directly. Since a filter is effectively an Undertow inner handler for the servlet deployment, CasAuthenticationMechanism is seeing the request first. Need to make an Undertow handler that delegates to the SingleSignOutHandler.

[sammyhk]

Actually also need to have an undertow specific SessionMappingStorage in SingleSignOutFilter, because the default one using an in-memory hash map which do NOT support clustering and also "is fundamentally incompatible with a distributable servlet container" (ref: https://issues.jboss.org/browse/WFLY-6315?focusedCommentId=13198747&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13198747) (NOTE: we have such issue and Wildfly 10 just throw exception when invalidate sessions in SingleSignOutFilter)

Need to access undertow io.undertow.server.session.SessionManager instead.

So the suggested solution is creating an undertow specific SessionMappingStorage which utilize infinispan distribution cache and undertow SessionManager.

[peshaw]

I'm struggling to implement this myself.. has there been any update on this issue?
Thanks,
Pete.