Skip to content

Instantly share code, notes, and snippets.

@jenrik

jenrik/AAU-1-DAY Secret

Last active March 27, 2019 17:07
Show Gist options
  • Save jenrik/663af358468b28c50c745e529bf3d926 to your computer and use it in GitHub Desktop.
Save jenrik/663af358468b28c50c745e529bf3d926 to your computer and use it in GitHub Desktop.
Note: replace anything inside <brackets>
Note: Some headers has been omitted
> Request
< Response
> POST /cas/v1/tickets HTTP/1.1
> Content-Type: application/x-www-form-urlencoded
> Host: signon.aau.dk
> Connection: close
>
> username=<username>%40student.aau.dk&password=<password>
< HTTP/1.1 201 Created
< Location: https://signon.aau.dk/cas/v1/tickets/<ticket>
< Connection: close
< Content-Type: text/html;charset=UTF-8
<
< <!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\"><html><head><title>201 Created</title></head><body><h1>TGT Created</h1><form action="https://signon.aau.dk/cas/v1/tickets/<ticket>" method="POST">Service:<input type="text" name="service" value=""><br><input type="submit" value="Submit"></form></body></html
> POST /cas/v1/tickets/<ticket> HTTP/1.1
> Content-Type: application/x-www-form-urlencoded; charset=utf-8
> Host: signon.aau.dk
> Connection: close
>
> service=https://student-app.test.aau.dk/appws/1.0/hello
< HTTP/1.1 200 OK
< Connection: close
< Content-Type: text/plain;charset=UTF-8
<
< <ticket>
> GET /appws/1.0/hello?ticket=<ticket> HTTP/1.1
> Host: student-app.test.aau.dk
> Connection: close
< HTTP/1.1 302 Found
< Set-Cookie: MOD_AUTH_CAS_S=<cookie>;Secure;Path=/; HttpOnly
< Location: https://student-app.test.aau.dk:443/appws/1.0/hello
< Connection: close
< Content-Type: text/html; charset=iso-8859-1
<
< <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
< <html><head>
< <title>302 Found</title>
< </head><body>
< <h1>Found</h1>
< <p>The document has moved <a href="https://student-app.test.aau.dk:443/appws/1.0/hello">here</a>.</p>
< <hr>
< <address>Apache/2.4.29 (Ubuntu) Server at student-app.test.aau.dk Port 443</address>
< </body></html>
Note: The cookie MOD_AUTH_CAS_S is used for later authentication
> GET /appws/1.0/allOneDayPasswords HTTP/1.1
> Host: student-app.test.aau.dk
> Cookie: MOD_AUTH_CAS_S=<cookie>
> Connection: close
< HTTP/1.1 200 OK
< Content-Type: application/json
< Cas-User: None
< Connection: close
<
< [
< {
< "date": "2019-03-27",
< "password": "exchange15digestion"
< },
< {
< "date": "2019-03-28",
< "password": "probable15store"
< },
< {
< "date": "2019-03-29",
< "password": "kick33cord"
< },
< {
< "date": "2019-03-30",
< "password": "sun75phd"
< }
< ]
> DELETE /cas/v1/tickets/<ticket> HTTP/1.1
> Content-Length: 0
> Host: signon.aau.dk
> Connection: close
< HTTP/1.1 200 OK
< Connection: close
< Content-Type: text/plain;charset=UTF-8
<
< <ticket>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment