jscas-server/lib/xmlTemplates/schema.xml

An implementation of Apereo's CAS protocol

<?xml version="1.0" encoding="UTF-8"?>
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
           xmlns:cas="http://www.yale.edu/tp/cas"
           targetNamespace="http://www.yale.edu/tp/cas"
           elementFormDefault="qualified" attributeFormDefault="unqualified">
  <xs:annotation>
    <xs:documentation>The following is the schema for the Central Authentication
      Service (CAS) version 3.0 protocol response. This covers the responses for
      the following servlets: /serviceValidate, /proxyValidate,
      /p3/serviceValidate, /p3/proxyValidate, /proxy This specification is
      subject to change.
    </xs:documentation>
  </xs:annotation>
  <xs:element name="serviceResponse" type="cas:ServiceResponseType"></xs:element>

  <xs:complexType name="ServiceResponseType">
    <xs:choice>
      <xs:element name="authenticationSuccess" type="cas:AuthenticationSuccessType"></xs:element>
      <xs:element name="authenticationFailure" type="cas:AuthenticationFailureType"></xs:element>
      <xs:element name="proxySuccess" type="cas:ProxySuccessType"></xs:element>
      <xs:element name="proxyFailure" type="cas:ProxyFailureType"></xs:element>
    </xs:choice>
  </xs:complexType>

  <xs:complexType name="AuthenticationSuccessType">
    <xs:sequence>
      <xs:element name="user" type="xs:string"></xs:element>
      <xs:element name="attributes" type="cas:AttributesType" minOccurs="0"></xs:element>
      <xs:element name="proxyGrantingTicket" type="xs:string" minOccurs="0"></xs:element>
      <xs:element name="proxies" type="cas:ProxiesType" minOccurs="0"></xs:element>
    </xs:sequence>
  </xs:complexType>

  <xs:complexType name="ProxiesType">
    <xs:sequence>
      <xs:element name="proxy" type="xs:string" maxOccurs="unbounded"></xs:element>
    </xs:sequence>
  </xs:complexType>

  <xs:complexType name="AuthenticationFailureType">
    <xs:simpleContent>
      <xs:extension base="xs:string">
        <xs:attribute name="code" type="xs:string" use="required"></xs:attribute>
      </xs:extension>
    </xs:simpleContent>
  </xs:complexType>

  <xs:complexType name="ProxySuccessType">
    <xs:sequence>
      <xs:element name="proxyTicket" type="xs:string"></xs:element>
    </xs:sequence>
  </xs:complexType>

  <xs:complexType name="ProxyFailureType">
    <xs:simpleContent>
      <xs:extension base="xs:string">
        <xs:attribute name="code" type="xs:string" use="required"></xs:attribute>
      </xs:extension>
    </xs:simpleContent>
  </xs:complexType>

  <xs:complexType name="AttributesType">
    <xs:sequence>
      <xs:element name="authenticationDate" type="xs:dateTime" minOccurs="1" maxOccurs="1"></xs:element>

      <xs:element name="longTermAuthenticationRequestTokenUsed" type="xs:boolean" minOccurs="1" maxOccurs="1">
        <xs:annotation>
          <xs:documentation>
            true if a long-term (Remember-Me) token was used
          </xs:documentation>
        </xs:annotation>
      </xs:element>

      <xs:element name="isFromNewLogin" type="xs:boolean" minOccurs="1" maxOccurs="1">
        <xs:annotation>
          <xs:documentation>
            true if this was from a new, interactive login. If
            login was from a non-interactive login (e.g. Remember-Me), this
            value is false or might be omitted.
          </xs:documentation>
        </xs:annotation>
      </xs:element>

      <xs:element name="memberOf" type="xs:string" minOccurs="0" maxOccurs="unbounded">
        <xs:annotation>
          <xs:documentation>
            One or many elements describing the units the user
            is member in. E.g. LDAP format values.
          </xs:documentation>
        </xs:annotation>
      </xs:element>

      <xs:any minOccurs="0" maxOccurs="unbounded" processContents="lax">
        <xs:annotation>
          <xs:documentation>
            Any user specific attribute elements.
          </xs:documentation>
        </xs:annotation>
      </xs:any>
    </xs:sequence>
  </xs:complexType>
</xs:schema>