pulibrary / tigerdata-app / 71d954da-08a6-4760-a6a6-2879d589de6f

    access_token = request.env["omniauth.auth"]

    @user = User.from_cas(access_token)

    set_cas_session

    if @user.nil? && access_token&.provider == "cas"

      Rails.logger.warn "User from CAS with netid #{access_token&.uid} was not found. Provider: cas"

      redirect_to help_path

      flash.notice = "You can not be signed in at this time."

    elsif @user.nil?

      Rails.logger.warn "User from CAS with netid #{access_token&.uid} was not found. Provider: #{access_token&.provider}"

      redirect_to root_path

      flash.alert = "You are not a recognized CAS user."

      sign_in_and_redirect @user, event: :authentication # this will throw if @user is not activated

      strategy = request.env["omniauth.strategy"]

      if strategy.present?

        service_url = strategy.append_params(mediaflux_extra_url, { url: request.referer })

        session[:cas_login_url] = strategy.login_url(service_url)

        session[:cas_validation_url] = strategy.service_validate_url(service_url, "")