All work

Consent condition on back-channel flows invoked incorrectly

Remediate use of UriComponentsBuilder in CAS implementation

Use entity ID for CAS relying party ID where possible

List of CAS proxies in /proxyValidate call contains service urls instead of pgtUrl

ticketValidityPeriod for CAS PGTs is abnormally short by default

Update CAS tests to use current Jetty

On CAS logout, SP is first listed as "pending", then "failure", then "success"

CAS attribute release vs. intercept page

idp.cas.relyingPartyIdFromMetadata does not fill rpUIContext on Logout

CAS support for resolvertest endpoint

Change default CAS TicketService to EncodingTicketService

httpclient sockets stuck in CLOSE_WAIT break CAS proxy callback

Enhance CAS EncodingTicketService to support root proxy-granting tickets

Promote CAS profile config into API

CAS proxy validator configuration is not customizable as intended

Rationalize relying party ID usage with CAS + metadata

CAS Proxy authentication failures require IDP restart to resolve.

Review and possibly remove CAS ticket dependency on IdPSession

CAS OOB exception

RuntimeException when using CAS and consent

Create CAS transcoders

CAS: Unicode SMP characters cause invalid XML

CAS proxyValidator follows redirects by default

Error creating bean with name 'proxyHttpSecurity'

CAS actions should avoid raising runtime exceptions

Config-based ForceAuthn enhancement broke renew flag for CAS

PGT granted when certificate validation fails

Adapt CAS logout propagation flow for initiation from SOAP logout

CAS flow should populate SAML metadata context lookup for filtering

Use entity ID rather than CAS service URL for services defined by metadata

rpUIContext not populated from CAS metadata

CAS proxy authentication is broken

Store CAS tickets in IdP session context

Provide way to set forceAuthn on an RP from the IdP side

Derive CAS principal from SubjectContext

CAS username / nameidentifier attribute remapping does not appear to work.

Duplicate CAS Ticket Identifiers

CAS tickets produced by EncodingTicketService violate CAS v2 protocol spec

Use of DefaultServiceComparator Breaks Configuration Convention

Add startsWith verification of CAS relying parties

Missing default in ValidateConfiguration class?

CAS ticket validation failing with renew parameter

CAS LoginConfiguration does not support postAuthenticationFlows

Adding hook for MetricContext to CAS flows

CAS Gateway Throws java.lang.IllegalStateException: Cannot find authentication results in IdP session

Issue CAS tickets that don't require server-side storage

Using gateway=true throws java.lang.IllegalStateException: AuthenticationContext not found

CAS with HTML local storage ServiceNotSpecified error

add CAS 1.0 protocol compatibility

add method=POST functionality to CAS