Open
Description
Sam Hough (Migrated from SEC-2907) said:
We hit the same problem as reported on the forum (linked).
Our Ajax heavy app hits an auth timeout and receives a redirect response but we can't handle it as the browser throws a XML parse exception first.
We have been running with our own version of CasAuthenticationEntryPoint that simply sends an XML tag in the body of the response (along with the redirect) to make the browser happy.
We would really like to roll this into core spring security so we can remove our "patch".
Many thanks