[Archivesspace_Users_Group] AS 3.4.0 CAS configuration Issues

[Joshua D. Shaw]

Hi Ludwig

Assuming you haven't removed your specific domain what you posted, I think you'll want to change all of the urls, the host, and the email domain to your specific urls/domain. You may need to contact your IT department to get specifics.

You only need the proxy url entries if you are running AS under a proxy.

Best,
Joshua

________________________________
From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> on behalf of Ludwig Possie <ludwigpossie at weber.edu>
Sent: Wednesday, August 9, 2023 8:36 PM
To: Archivesspace Users Group <archivesspace_users_group at lyralists.lyrasis.org>
Subject: [Archivesspace_Users_Group] AS 3.4.0 CAS configuration Issues

I'm trying to get CAS authentication setup on our AS 3.4.0 using the lyrasis/aspace-oauth plugin.  I've tried to follow the example outlined on the plugin.  I'm able to get as far as to the staff login page and I can see a "CAS sign In" button on the top right, but when I press it I get the following message, "The page you were looking for doesn't exist."  The button links me to https://as.someuniversity.edu/staff/auth/cas

My config.rb contains the following parameters is there something that I need to add or change?:

AppConfig[:frontend_proxy_url] = "https://as.someuniversity.edu/staff"
AppConfig[:public_proxy_url] = "https://as.someuniversity.edu/"

AppConfig[:authentication_sources] = [{
       model: 'ASOauth',
                                        provider: 'cas',
                                        label: 'CAS Sign In',
                                        slo_link: true,
                                        config: {
                                                url: 'https://cas.someuniversity.edu<https://cas.someuniversity.edu/>',
                                                host: 'cas.someuniversity.edu<http://cas.someuniversity.edu/>',
                                                ssl: true,
                                                login_url: '/login',
                                                logout_url: '/logout',
                                                service_validate_url: '/cas/serviceValidate',
    callback_url: 'auth/cas/callback',
                                                uid_key: 'user',
                                                email_key: 'email'
                                                # more cas keys and options at: https://github.com/dlindahl/omniauth-cas
                                                #
                                                # if your server does not return an email address, you can add one
                                                # here using the fetch_raw_info option.
                                                #fetch_raw_info: ->(s, o, t, user_info) {  { email: "#{user_info['user']}@ivory-tower.edu<http://ivory-tower.edu/>" } }
                                        }
}]

--
Ludwig Possié
Systems Admin
Stewart Library
Weber State University
801-626-8093
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lyralists.lyrasis.org/pipermail/archivesspace_users_group/attachments/20230810/7ad8e35c/attachment.html>