Add CAS protocol as account/login possibility

[konsumate]

Hey there,

It would be nice to have the Jasig CAS protocol as login possibility, there seems to exist a meteor cas binding already at https://github.com/tvoglund/meteor-accounts-cas

If I understood this correctly, a bit of attribute binding, saving settings and graphical exposure is missing in order to get this up and running?

THanks a bunch!

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

[konsumate]

Any directions or hints in order to get a prototype up and running with a current deploy from the Dockerfile? as in how to integrate this stuff with the node and folder structure of rocket.chat. Is a drop in sufficient? do the libraries need to be registered, exposed somehow?

[Sing-Li]

@CoreCache This is a non trivial development effort. Assuming you are already familiar with Node.js, Coffeescript, and Meteor. Please catch one of the core developers on demo.rocket.chat. #dev channel
during UTC-4 working hours for some guidance. It would be a great feature to get working, and Rocket.Chat into the hands of more educators.

[engelgabriel]

@CoreCache looks like you've done some progress on this? Do you want to do a PR adding your package so we can collaborate?

[engelgabriel]

This issue will help with #322

[konsumate]

Some untested work for CAS 1.0 (only username given upon auth, no attributes) has been done in https://github.com/corecache/Rocket.Chat/tree/cas - I'll want to roughly test this stuff before arranging a PR

[engelgabriel]

Help testing this is welcome: #1970

[konsumate]

Just in case, this only covers CAS 1.0 for now.

[konsumate]

At least some progress was made here, the CAS 1.0 did work, the CAS module was able to identify users against the CAS service, but login them in into RocketChat failed somehow: After the user authenticated against cas, the popup window for the cas auth vanished but nothing happened, I guess there is some mismatch for the returning response.

Edit: For those who want to check the code which is beeing called for the LoginHandlers, see my forked Repo above.

[engelgabriel]

@rodrigok is now focused on refactoring the LDAP package, maybe now it is a good time to collaborate, as they seem to share some logic.

[konsumate]

I gave this another debugging session today and was able to get it up and running correctly.
The next steps include cleaning up the code, releasing the PR and some small twitch to show/hide the CAS login button depending on the plugin settings.

[konsumate]

PullRequest: #2183

[rodrigok]

Closed via #2183