fix(auth): send client token in CAS ticket validation request

The SSO server requires the registered application token (clientToken) to
authenticate the ticket validation request. Include it in the POST body.
This commit is contained in:
jangrui 2026-05-16 04:26:09 +08:00
parent 8759388960
commit cbe675e98d

View file

@ -35,7 +35,8 @@ public class SsoClient {
public SsoUser validateTicket(String ticket) {
var request = Map.of(
"Ticket", ticket,
"Url", properties.getClientUrl()
"Url", properties.getClientUrl(),
"Token", properties.getClientToken()
);
var validateUrl = UriComponentsBuilder.fromHttpUrl(properties.getBaseUrl())
.path(properties.getValidatePath())