From 3c9bdbd63e0f335e2aa17f640c3afdfa8d541a9a Mon Sep 17 00:00:00 2001
From: Jacek Kowalski <Jacek@jacekk.info>
Date: Tue, 03 Nov 2026 20:58:49 +0000
Subject: [PATCH] Verify target service when issuing proxy tickets
---
integrationTest/suite.sh | 8 ++++++++
1 files changed, 8 insertions(+), 0 deletions(-)
diff --git a/integrationTest/suite.sh b/integrationTest/suite.sh
index 47eadb2..b2f2b24 100755
--- a/integrationTest/suite.sh
+++ b/integrationTest/suite.sh
@@ -41,6 +41,14 @@
$CURL "${keycloak_cas_url}/validate?service=http://localhost&ticket=$ticket"
echo
+echo "Testing CAS 1.0 - ticket issued for another service..."
+ticket=$(get_ticket)
+if $CURL "${keycloak_cas_url}/validate?service=http://localhost/other&ticket=$ticket"; then
+ echo "Ticket was accepted for a different service"
+ exit 1
+fi
+echo
+
# CAS 2.0
echo "Testing CAS 2.0 - XML..."
ticket=$(get_ticket)
--
Gitblit v1.10.0