{"action":"created","issue":{"url":"https://api.github.com/repos/apereo/cas/issues/1869","repository_url":"https://api.github.com/repos/apereo/cas","labels_url":"https://api.github.com/repos/apereo/cas/issues/1869/labels{/name}","comments_url":"https://api.github.com/repos/apereo/cas/issues/1869/comments","events_url":"https://api.github.com/repos/apereo/cas/issues/1869/events","html_url":"https://github.com/apereo/cas/issues/1869","id":164054585,"number":1869,"title":"Destroying the TGT Does Not Remove the PGT ","user":{"login":"wcrowell","id":18705165,"avatar_url":"https://avatars.githubusercontent.com/u/18705165?v=3","gravatar_id":"","url":"https://api.github.com/users/wcrowell","html_url":"https://github.com/wcrowell","followers_url":"https://api.github.com/users/wcrowell/followers","following_url":"https://api.github.com/users/wcrowell/following{/other_user}","gists_url":"https://api.github.com/users/wcrowell/gists{/gist_id}","starred_url":"https://api.github.com/users/wcrowell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wcrowell/subscriptions","organizations_url":"https://api.github.com/users/wcrowell/orgs","repos_url":"https://api.github.com/users/wcrowell/repos","events_url":"https://api.github.com/users/wcrowell/events{/privacy}","received_events_url":"https://api.github.com/users/wcrowell/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/apereo/cas/labels/Bug","name":"Bug","color":"e11d21"},{"url":"https://api.github.com/repos/apereo/cas/labels/CAS%20Protocol","name":"CAS Protocol","color":"5319e7"},{"url":"https://api.github.com/repos/apereo/cas/labels/Logout%20&%20SLO","name":"Logout & SLO","color":"5319e7"},{"url":"https://api.github.com/repos/apereo/cas/labels/Proxy%20Authentication","name":"Proxy Authentication","color":"5319e7"},{"url":"https://api.github.com/repos/apereo/cas/labels/Ticket","name":"Ticket","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/apereo/cas/milestones/36","html_url":"https://github.com/apereo/cas/milestones/4.2.4","labels_url":"https://api.github.com/repos/apereo/cas/milestones/36/labels","id":1849326,"number":36,"title":"4.2.4","description":"CAS 4.2.4 Maintenance Release","creator":{"login":"mmoayyed","id":1205228,"avatar_url":"https://avatars.githubusercontent.com/u/1205228?v=3","gravatar_id":"","url":"https://api.github.com/users/mmoayyed","html_url":"https://github.com/mmoayyed","followers_url":"https://api.github.com/users/mmoayyed/followers","following_url":"https://api.github.com/users/mmoayyed/following{/other_user}","gists_url":"https://api.github.com/users/mmoayyed/gists{/gist_id}","starred_url":"https://api.github.com/users/mmoayyed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mmoayyed/subscriptions","organizations_url":"https://api.github.com/users/mmoayyed/orgs","repos_url":"https://api.github.com/users/mmoayyed/repos","events_url":"https://api.github.com/users/mmoayyed/events{/privacy}","received_events_url":"https://api.github.com/users/mmoayyed/received_events","type":"User","site_admin":false},"open_issues":2,"closed_issues":9,"state":"open","created_at":"2016-06-27T01:29:10Z","updated_at":"2016-07-12T08:00:46Z","due_on":"2016-07-29T07:00:00Z","closed_at":null},"comments":15,"created_at":"2016-07-06T11:25:49Z","updated_at":"2016-07-12T12:00:40Z","closed_at":null,"body":"The discussion for this issue is located here:\r\n\r\n[https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/ZF6CIyNACdI](https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/ZF6CIyNACdI)\r\n\r\nThe Ticket Granting Ticket (TGT) creation and removal was performed using the CAS REST API: [https://wiki.jasig.org/display/casum/restful+api](https://wiki.jasig.org/display/casum/restful+api)\r\n\r\nUsing the PGTInvalidationByLogoutSpec test in cas-functional-tests: [https://github.com/wcrowell/cas-functional-tests/blob/master/src/test/groovy/org/jasig/cas/test/validation/PGTInvalidationByLogoutSpec.groovy](https://github.com/wcrowell/cas-functional-tests/blob/master/src/test/groovy/org/jasig/cas/test/validation/PGTInvalidationByLogoutSpec.groovy), it was noticed the Proxy Granting TIcket (PGT) could still be used to generate Proxy Tickets (PT).  On line 50 of this test the assertion is commented out:\r\n\r\n`assert xml.proxyFailure.@code == 'BAD_PGT'`\r\n\r\nThis assertion fails because a proxy ticket is generated instead.\r\n\r\nTo reproduce, clone the git clone cas-functional-tests: `git clone https://github.com/wcrowell/cas-functional-tests.git`\r\n\r\nThen run: `gradle clean farmIntegrationTest`\r\n\r\nGo to the report: cas-functional-tests/build/reports/tests/classes/org.jasig.cas.test.validation.PGTInvalidationByLogoutSpec.html\r\n\r\nSee the output:\r\n\r\n```\r\nTicket Granting Ticket ID TGT-1-VboJ29NFir0XZmEj5XNCAzfPgHp2V5KgdaCAnSJlnAgOCMmoIq-cas01.example.org was deleted.\r\nfinal: \r\n\r\n<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>\r\n    <cas:proxySuccess>\r\n        <cas:proxyTicket>PT-2-idF5fWrGB7y9OPWdRt1z-cas01.example.org</cas:proxyTicket>\r\n    </cas:proxySuccess>\r\n</cas:serviceResponse>\r\n```\r\n\r\nDebug output on the org.jasig package is attached.  You can see from the debug output that it states the TGT is destroyed and cannot be found in the registry, but yet the PT is created from the PGT.\r\n\r\n[output-debug.txt](https://github.com/apereo/cas/files/349630/output-debug.txt)\r\n"},"comment":{"url":"https://api.github.com/repos/apereo/cas/issues/comments/232026121","html_url":"https://github.com/apereo/cas/issues/1869#issuecomment-232026121","issue_url":"https://api.github.com/repos/apereo/cas/issues/1869","id":232026121,"user":{"login":"mmoayyed","id":1205228,"avatar_url":"https://avatars.githubusercontent.com/u/1205228?v=3","gravatar_id":"","url":"https://api.github.com/users/mmoayyed","html_url":"https://github.com/mmoayyed","followers_url":"https://api.github.com/users/mmoayyed/followers","following_url":"https://api.github.com/users/mmoayyed/following{/other_user}","gists_url":"https://api.github.com/users/mmoayyed/gists{/gist_id}","starred_url":"https://api.github.com/users/mmoayyed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mmoayyed/subscriptions","organizations_url":"https://api.github.com/users/mmoayyed/orgs","repos_url":"https://api.github.com/users/mmoayyed/repos","events_url":"https://api.github.com/users/mmoayyed/events{/privacy}","received_events_url":"https://api.github.com/users/mmoayyed/received_events","type":"User","site_admin":false},"created_at":"2016-07-12T12:00:40Z","updated_at":"2016-07-12T12:00:40Z","body":"Ignore it. That's a shiro issue, not us. A new version of the snapshot should update shiro and remove that warning in a bit."}}
{"actor":{"display_login":"mmoayyed"}}