From cbe675e98dc4aed82c6c54a44ef539a61531e18e Mon Sep 17 00:00:00 2001 From: jangrui Date: Sat, 16 May 2026 04:26:09 +0800 Subject: [PATCH] fix(auth): send client token in CAS ticket validation request The SSO server requires the registered application token (clientToken) to authenticate the ticket validation request. Include it in the POST body. --- .../src/main/java/com/iflytek/skillhub/auth/sso/SsoClient.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/server/skillhub-auth/src/main/java/com/iflytek/skillhub/auth/sso/SsoClient.java b/server/skillhub-auth/src/main/java/com/iflytek/skillhub/auth/sso/SsoClient.java index 130945333..853f91996 100644 --- a/server/skillhub-auth/src/main/java/com/iflytek/skillhub/auth/sso/SsoClient.java +++ b/server/skillhub-auth/src/main/java/com/iflytek/skillhub/auth/sso/SsoClient.java @@ -35,7 +35,8 @@ public class SsoClient { public SsoUser validateTicket(String ticket) { var request = Map.of( "Ticket", ticket, - "Url", properties.getClientUrl() + "Url", properties.getClientUrl(), + "Token", properties.getClientToken() ); var validateUrl = UriComponentsBuilder.fromHttpUrl(properties.getBaseUrl()) .path(properties.getValidatePath())