CAS5 之 超时设置

TGT ST超时

详见TGT Expiration Policy
https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#tgt-expiration-policy

Ticket expiration policies are activated in the following order:

Tickets are never expired, if and when settings for the default policy are configured accordingly.
Timeout
Default
Throttled Timeout
Hard Timeout
Tickets always expire immediately.
Default
Provides a hard-time out as well as a sliding window.

1
2
3
# Set to a negative value to never expire tickets
# cas.ticket.tgt.maxTimeToLiveInSeconds=28800
# cas.ticket.tgt.timeToKillInSeconds=7200
Remember Me
1
2
# cas.ticket.tgt.rememberMe.enabled=true
# cas.ticket.tgt.rememberMe.timeToKillInSeconds=28800
Timeout
The expiration policy applied to TGTs provides for most-recently-used expiration policy, similar to a Web server session timeout.

1
# cas.ticket.tgt.timeout.maxTimeToLiveInSeconds=28800
Throttled Timeout
The throttled timeout policy extends the Timeout policy with the concept of throttling where a ticket may be used at most every N seconds.

1
2
# cas.ticket.tgt.throttledTimeout.timeToKillInSeconds=28800
# cas.ticket.tgt.throttledTimeout.timeInBetweenUsesInSeconds=5
Hard Timeout
The hard timeout policy provides for finite ticket lifetime as measured from the time of creation.

1
# cas.ticket.tgt.hardTimeout.timeToKillInSeconds=28800

当CAS作为第三方认证时的超时

# cas.authn.oauth.refreshToken.timeToKillInSeconds=2592000

# cas.authn.oauth.code.timeToKillInSeconds=30
# cas.authn.oauth.code.numberOfUses=1

# cas.authn.oauth.accessToken.releaseProtocolAttributes=true
#当用户在2个小时（7200秒）之内不动移动鼠标，则tgt过期
# cas.authn.oauth.accessToken.timeToKillInSeconds=7200
#当用户在系统超过8个小时（28800秒），则tgt过期
# cas.authn.oauth.accessToken.maxTimeToLiveInSeconds=28800

# cas.authn.oauth.grants.resourceOwner.requireServiceHeader=true

# cas.authn.oauth.userProfileViewType=NESTED|FLAT
# cas.authn.oauth.throttler=neverThrottle|authenticationThrottle