cas多系统集成统一认证

心已赠人 2022-05-14 01:34 239阅读 0赞

参考：[http://blog.csdn.net/lifetragedy/article/details/43817903][http_blog.csdn.net_lifetragedy_article_details_43817903]

这里有2个ssoclient工程，代码一样，只是端口不一样。  
一个端口为8080，一个为8888，cas server的端口为8899.  
ssoclient使用的springmvc+spring.  
拿其中一个ssoclient的代码说明。

maven依赖：

<properties>
        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
        <spring.version>4.3.1.RELEASE</spring.version>
        <jackson.version>2.5.0</jackson.version>
    </properties>
    <dependencies>
        <dependency>
            <groupId>org.jasig.cas.client</groupId>
            <artifactId>cas-client-core</artifactId>
            <version>3.3.3</version>
        </dependency>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-core</artifactId>
            <version>${spring.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-beans</artifactId>
            <version>${spring.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-context</artifactId>
            <version>${spring.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-tx</artifactId>
            <version>${spring.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-web</artifactId>
            <version>${spring.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-webmvc</artifactId>
            <version>${spring.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-jdbc</artifactId>
            <version>${spring.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-test</artifactId>
            <version>${spring.version}</version>
            <scope>test</scope>
        </dependency>
        <dependency>
            <groupId>log4j</groupId>
            <artifactId>log4j</artifactId>
            <version>1.2.17</version>
        </dependency>
        <dependency>
            <groupId>javax.servlet</groupId>
            <artifactId>servlet-api</artifactId>
            <version>3.0-alpha-1</version>
        </dependency>
        <dependency>
            <groupId>javax.servlet</groupId>
            <artifactId>jstl</artifactId>
            <version>1.2</version>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-annotations</artifactId>
            <version>${jackson.version}</version>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-core</artifactId>
            <version>${jackson.version}</version>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-databind</artifactId>
            <version>${jackson.version}</version>
        </dependency>
        <dependency>
            <groupId>commons-io</groupId>
            <artifactId>commons-io</artifactId>
            <version>2.4</version>
        </dependency>
        <dependency>
            <groupId>commons-fileupload</groupId>
            <artifactId>commons-fileupload</artifactId>
            <version>1.2.2</version>
        </dependency>
    </dependencies>

spring-core.xml:

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.1.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.1.xsd">
        
        <context:component-scan base-package="com.tommy" >
        </context:component-scan>
    </beans>

spring-mvc.xml:

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans" xmlns:mvc="http://www.springframework.org/schema/mvc" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p" xmlns:context="http://www.springframework.org/schema/context" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.1.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.1.xsd http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc-4.1.xsd">
        
        <context:component-scan base-package="com.tommy.sso.controller" />
        
        <bean id="mappingJacksonHttpMessageConverter" class="org.springframework.http.converter.json.MappingJackson2HttpMessageConverter">
            <property name="supportedMediaTypes">
                <list>
                    <value>text/html;charset=UTF-8</value>
                </list>
            </property>
        </bean>
        
        <bean class="org.springframework.web.servlet.mvc.annotation.AnnotationMethodHandlerAdapter">
            <property name="messageConverters">
                <list>
                    
                    <ref bean="mappingJacksonHttpMessageConverter" />
                </list>
            </property>
        </bean>
        
        <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">
            <property name="viewClass" value="org.springframework.web.servlet.view.JstlView" />
            <property name="prefix" value="/views" />
            <property name="suffix" value=".jsp" />
        </bean>
        
        <bean id="multipartResolver" class="org.springframework.web.multipart.commons.CommonsMultipartResolver">
            <property name="defaultEncoding">
                <value>UTF-8</value>
            </property>
            <property name="maxUploadSize">
                
                <value>32505856</value>
            </property>
            <property name="maxInMemorySize">
                <value>4096</value>
            </property>
        </bean>
    </beans>

web.xml:

<?xml version="1.0" encoding="UTF-8"?>
    <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5">
        <display-name>cas-sample-site2</display-name>
        <welcome-file-list>
            <welcome-file>index.jsp</welcome-file>
            <welcome-file>index.html</welcome-file>
            <welcome-file>index.htm</welcome-file>
            <welcome-file>default.html</welcome-file>
            <welcome-file>default.htm</welcome-file>
            <welcome-file>default.jsp</welcome-file>
        </welcome-file-list>
        <context-param>
            <param-name>contextConfigLocation</param-name>
            <param-value>classpath:spring-core.xml</param-value>
        </context-param>
        <listener>
            <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
        </listener>
        
        <listener>
            <listener-class>org.springframework.web.util.IntrospectorCleanupListener</listener-class>
        </listener>
        <listener>
            <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
        </listener>
        <filter>
            <filter-name>CAS Single Sign Out Filter</filter-name>
            <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
        </filter>
        <filter-mapping>
            <filter-name>CAS Single Sign Out Filter</filter-name>
            <url-pattern>*</url-pattern>
        </filter-mapping>
        <filter>
            <filter-name>CAS Validation Filter</filter-name>
            <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>
            <init-param>
                <param-name>casServerUrlPrefix</param-name>
                <param-value>http://www.cas.com:8899/cas/</param-value>
            </init-param>
            <init-param>
                <param-name>serverName</param-name>
                <param-value>http://www.ssoclient.com:8080/</param-value>
            </init-param>
            <init-param>
                <param-name>useSession</param-name>
                <param-value>true</param-value>
            </init-param>
            <init-param>
                <param-name>redirectAfterValidation</param-name>
                <param-value>true</param-value>
            </init-param>
        </filter>
        <filter-mapping>
            <filter-name>CAS Validation Filter</filter-name>
            <url-pattern>*</url-pattern>
        </filter-mapping>
        <filter>
            <filter-name>CAS Filter</filter-name>
            <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
            <init-param>
                <param-name>casServerLoginUrl</param-name>
                <param-value>http://www.cas.com:8899/cas/login</param-value>
            </init-param>
            <init-param>
                <param-name>serverName</param-name>
                <param-value>http://www.ssoclient.com:8080/</param-value>
            </init-param>
        </filter>
        <filter-mapping>
            <filter-name>CAS Filter</filter-name>
            <url-pattern>*</url-pattern>
        </filter-mapping>
        <filter>
            <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
            <filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>
        </filter>
        <filter-mapping>
            <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
            <url-pattern>*</url-pattern>
        </filter-mapping>
        <servlet>
            <description>spring mvc servlet</description>
            <servlet-name>rest</servlet-name>
            <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
            <init-param>
                <param-name>contextConfigLocation</param-name>
                <param-value>
                    /WEB-INF/spring-mvc.xml
                </param-value>
            </init-param>
            <load-on-startup>1</load-on-startup>
        </servlet>
        <servlet-mapping>
            <servlet-name>rest</servlet-name>
            <url-pattern>*.do</url-pattern>
        </servlet-mapping>
    </web-app>

注意：web.xml中cas相关的listener和filter的顺序，不一致可能导致登录或退出有问题。

IndexController.java:

/** * Created by Administrator on 2017/5/17. */
    @Controller
    public class IndexController { 
        @RequestMapping("/index.do")
        public String showIndex(HttpServletRequest request, HttpServletResponse response) {
            Principal principal = request.getUserPrincipal();
            request.getSession().setAttribute("user", principal.getName());
            return "/index";
        }
    }

/view/index.jsp:

<%@ page contentType="text/html;charset=UTF-8" isELIgnored="false" %>
    <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
    <html>
    <body>
    ${user}, 你好啊！ <a href="http://www.ssoclient.com:8888/ssoclient/index.do">访问ssoclient1</a> <a href="http://www.cas.com:8899/cas/logout">登出</a>
    </body>
    </html>

这里2个ssoclient工程在不同的tomcat中，分别部署后。  
1. 访问[http://www.ssoclient.com:8888/ssoclient/index.do][http_www.ssoclient.com_8888_ssoclient_index.do]会跳转到cas server的登录页面。  
![52917568-file_1495099508879_161ad.png][]  
2. 访问[http://www.ssoclient.com:8080/ssoclient/index.do][http_www.ssoclient.com_8080_ssoclient_index.do]会跳转到cas server的登录页面。  
![92646017-file_1495099544929_1b13.png][]  
3. 在任意一个ssoclient执行登录操作（比如8888的ssoclient），登录成功后。  
![45254271-file_1495099609491_fb58.png][]  
访问8080的ssoclient  
![56403892-file_1495099653530_8450.png][]  
会发现直接就可以访问，达到登录一个系统，其他系统不用再登录的目的。

1.  在任意一个ssoclient执行退出操作（比如8888的ssoclient），执行后。  
    8888的ssoclient  
    ![94496574-file_1495099764188_a0f3.png][]  
    刷新8080的ssoclient  
    ![92646017-file_1495099544929_1b13.png][]  
    会发现会跳转到cas server的登录页面。达到任意一个系统退出，其他系统自动退出的目的。

注意：  
如果有client的工程与cas server部署在一个tomcat，这个client是不会因为另外一个client执行logout而退出的。  
注意浏览器缓存，退出操作。

[http_blog.csdn.net_lifetragedy_article_details_43817903]: http://blog.csdn.net/lifetragedy/article/details/43817903
[http_www.ssoclient.com_8888_ssoclient_index.do]: http://www.ssoclient.com:8888/ssoclient/index.do
[52917568-file_1495099508879_161ad.png]: http://omh46px9n.bkt.clouddn.com/17-5-18/52917568-file_1495099508879_161ad.png
[http_www.ssoclient.com_8080_ssoclient_index.do]: http://www.ssoclient.com:8080/ssoclient/index.do
[92646017-file_1495099544929_1b13.png]: http://omh46px9n.bkt.clouddn.com/17-5-18/92646017-file_1495099544929_1b13.png
[45254271-file_1495099609491_fb58.png]: http://omh46px9n.bkt.clouddn.com/17-5-18/45254271-file_1495099609491_fb58.png
[56403892-file_1495099653530_8450.png]: http://omh46px9n.bkt.clouddn.com/17-5-18/56403892-file_1495099653530_8450.png
[94496574-file_1495099764188_a0f3.png]: http://omh46px9n.bkt.clouddn.com/17-5-18/94496574-file_1495099764188_a0f3.png