Apereo CAS - Service Redirection Strategies

Thursday, Oct 31, 2019
1 minute read

This post is relocated to here.

Apereo CAS is shortening the security disclosure grace window.

Disclosure of a series of security issues with the Apereo CAS software.

Disclosure of a series of security issues with the Apereo CAS software.

Disclosure of a security issue with the Apereo CAS software acting itself as an OpenID Connect provider.

Disclosure of a security issue with the Java CAS Client validating JWTs.

An overview of Apereo CAS' ability to register identity providers for external and delegated authentication attempts.

Disclosure of a security issue with the Apereo CAS software using JWT non-interactive authentication.

An overview of the work done on performance.

An overview of Apereo CAS' ability to handle dynamic configuration updates.

We’re excited to share that the Apereo CAS project has been awarded funding from NLnet to support the development of the CAS project.