fix(cas-auth): harden session and callback handling#13427

Merged

shreemaan-abhishek merged 9 commits into

apache:masterfrom

shreemaan-abhishek:fix-cas-auth-require-initiation-cookie

Jun 3, 2026

Commits on May 25, 2026

fix(cas-auth): require valid initiation cookie at callback
shreemaan-abhishek
committed
fix(cas-auth): scope session cookie per CAS configuration
shreemaan-abhishek
committed
test(cas-auth): use defined upstream actions in scope test
shreemaan-abhishek
committed
fix(cas-auth): log failures and evictions when refreshing session ttl
shreemaan-abhishek
committed
fix(cas-auth): namespace shared-dict keys with the config fingerprint
shreemaan-abhishek
committed
test(cas-auth): exercise per-config scoping end-to-end via Keycloak
shreemaan-abhishek
committed
test(cas-auth): drop Keycloak dependency from per-config scoping test
shreemaan-abhishek
committed
test(cas-auth): pin the per-config scoping test to dedicated routes
shreemaan-abhishek
committed
test(cas-auth): cover the in-value fingerprint check in scope-b
shreemaan-abhishek
committed