title: How to use Timeout Ticket Expiration Policy in CAS while client session cookie expires after session end?
body: <p>I use CAS Java client 3.4.1 and CAS server 5.3.</p>
  
  <p>As I understand after successful authentication CAS client adds data to client app's session. Now on every request CAS client verifies this data in session and if it's correct, request flow continues (no request is made to CAS server). But if session is missing or CAS attribute (_const_cas_assertion_) is missing from session, then CAS client makes request to CAS server to verify that user is authenticated. Now on that request CAS server updates it's TGT last used timestamp and TGT timeout is extended.</p>
  
  <p>In my case client app's session cookie (JSESSIONID) expires when session ends (browser is closed for example). But when TGT expires lets say in 10 hours and user does not close it's browser in 10 hours then no request is made to CAS server and TGT expiration is not extended. But if user opens after 5 hours client2 app, then request is made to CAS server and TGT expiration is extended by 10 hours. That means SLO request is sent to client1 app after 15 hours.</p>
  
  <p>My question is that how can I make client to update TGT last time used timestamp when it's using only client1 app without clearing client's session cookie or making client otherwise call authentication in CAS server again? I want to update TGT last time used timestamp if client app is opened (and used) and not closed in 10 hours so client would not be sent SLO request after 10 hours has passed (because TGT last used is 10 hours ago).</p>
  
  <p>In other words how to extend the use of TGT when client is using app without clearing session?</p>
  
  <p>Clearing session is not acceptable because then CAS client's AuthenticationFilter would initiate authentication which would redirect client's browser to CAS server and this would redirect it back to client app. It will redirect back to same page, but clients view state would be lost (for example in JSF ViewScoped bean).</p>