CAS学习记录4--CAS,Spring MVC,Shiro整合

我不是女神ヾ 2022-05-19 00:14 249阅读 0赞

一、前言

前一节介绍Servlet配置方式，本节介绍比较实用的部分，CAS与Spring MVC，Shiro的整合

二、项目配置

之前已经建好test3的模组，现在就在它上面配

首先是CA证书，将之前生成的证书复制过去

![20170725172611440][]

打开pom.xml文件，修改配置如下，比较简单，就不说明了

1.  `<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"`
2.  `xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">`
3.  `<parent>`
4.  `<artifactId>cas-test</artifactId>`
5.  `<groupId>com.company.cas-test</groupId>`
6.  `<version>1.0-SNAPSHOT</version>`
7.  `</parent>`
8.  `<modelVersion>4.0.0</modelVersion>`
9.  `<artifactId>test3</artifactId>`
10. `<packaging>war</packaging>`
11. `<name>test3 Maven Webapp</name>`
12. `<url>http://maven.apache.org</url>`
13.  
14. `<properties>`
15. `<spring.version>4.3.8.RELEASE</spring.version>`
16. `</properties>`
17.  
18. `<dependencies>`
19. `        `
20. `        <dependency>`
21. `            <groupId>javax.servlet</groupId>`
22. `            <artifactId>servlet-api</artifactId>`
23. `            <version>3.0-alpha-1</version>`
24. `            <scope>provided</scope>`
25. `        </dependency>`
26. `<dependency>`
27. `<groupId>org.slf4j</groupId>`
28. `<artifactId>slf4j-log4j12</artifactId>`
29. `<version>1.7.2</version>`
30. `</dependency>`
31. ``
32. `<dependency>`
33. `<groupId>org.springframework</groupId>`
34. `<artifactId>spring-core</artifactId>`
35. `<version>${spring.version}</version>`
36. `</dependency>`
37. `<dependency>`
38. `<groupId>org.springframework</groupId>`
39. `<artifactId>spring-webmvc</artifactId>`
40. `<version>${spring.version}</version>`
41. `</dependency>`
42. `<dependency>`
43. `<groupId>org.springframework</groupId>`
44. `<artifactId>spring-aop</artifactId>`
45. `<version>${spring.version}</version>`
46. `</dependency>`
47. `<dependency>`
48. `<groupId>org.springframework</groupId>`
49. `<artifactId>spring-orm</artifactId>`
50. `<version>${spring.version}</version>`
51. `</dependency>`
52. `<dependency>`
53. `<groupId>org.springframework</groupId>`
54. `<artifactId>spring-test</artifactId>`
55. `<version>${spring.version}</version>`
56. `</dependency>`
57. `<dependency>`
58. `<groupId>org.springframework</groupId>`
59. `<artifactId>spring-context</artifactId>`
60. `<version>${spring.version}</version>`
61. `</dependency>`
62. `<dependency>`
63. `<groupId>org.springframework</groupId>`
64. `<artifactId>spring-beans</artifactId>`
65. `<version>${spring.version}</version>`
66. `</dependency>`
67. `<dependency>`
68. `<groupId>org.springframework</groupId>`
69. `<artifactId>spring-tx</artifactId>`
70. `<version>${spring.version}</version>`
71. `</dependency>`
72. `<dependency>`
73. `<groupId>org.springframework</groupId>`
74. `<artifactId>spring-context-support</artifactId>`
75. `<version>${spring.version}</version>`
76. `</dependency>`
77.  
78. `<dependency>`
79. `<groupId>org.apache.shiro</groupId>`
80. `<artifactId>shiro-core</artifactId>`
81. `<version>1.3.2</version>`
82. `</dependency>`
83. `<dependency>`
84. `<groupId>org.apache.shiro</groupId>`
85. `<artifactId>shiro-spring</artifactId>`
86. `<version>1.3.2</version>`
87. `</dependency>`
88. `<dependency>`
89. `<groupId>org.apache.shiro</groupId>`
90. `<artifactId>shiro-cas</artifactId>`
91. `<version>1.3.2</version>`
92. `</dependency>`
93.  
94. `<dependency>`
95. `<groupId>org.jasig.cas.client</groupId>`
96. `<artifactId>cas-client-core</artifactId>`
97. `<version>3.4.1</version>`
98. `</dependency>`
99. `<dependency>`
100. `<groupId>junit</groupId>`
101. `<artifactId>junit</artifactId>`
102. `<version>3.8.1</version>`
103. `<scope>test</scope>`
104. `</dependency>`
105. `</dependencies>`
106. `<build>`
107. `<finalName>test3</finalName>`
108. `<plugins>`
109. `<plugin>`
110. `<artifactId>maven-compiler-plugin</artifactId>`
111. `<version>2.3.2</version>`
112. `<configuration>`
113. `<source>1.6</source> `
114. `<target>1.6</target> `
115. `<encoding>utf8</encoding>`
116. `</configuration>`
117. `</plugin>`
118. `<plugin>`
119. ``
120. `<groupId>org.apache.tomcat.maven</groupId>`
121. ``
122. `<artifactId>tomcat7-maven-plugin</artifactId>`
123. ``
124. `<version>2.0</version>`
125. ``
126. `<configuration>`
127. `<port>8004</port>`
128. `<path>/test3</path>`
129. `<uriEncoding>UTF-8</uriEncoding>`
130. `<keystoreFile>${project.basedir}\localhost</keystoreFile>`
131. `<keystorePass>123456</keystorePass>`
132. `<httpsPort>9004</httpsPort>`
133. `</configuration>`
134. `</plugin>`
135. `</plugins>`
136. `</build>`
137. `</project>`

打开WEB-INF/web.xml修改配置如下，有的文章说Shiro配置要在Spring MVC配置之前，实际上是没有关系的，因为web.xml 的加载顺序是：context-param -> listener -> filter -> servlet

1.  `<?xml version="1.0" encoding="UTF-8"?>`
2.  `<web-app xmlns="http://java.sun.com/xml/ns/javaee"`
3.  `xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"`
4.  `xsi:schemaLocation="http://java.sun.com/xml/ns/javaee`
5.  `http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"`
6.  `version="3.0" metadata-complete="true">`
7.  `<display-name>Archetype Created Web Application</display-name>`
8.  ``
9.  `<listener>`
10. `<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>`
11. `</listener>`
12. `<context-param>`
13. `<param-name>contextConfigLocation</param-name>`
14. `<param-value>`
15. `classpath*:applicationContext-web.xml`
16. `</param-value>`
17. `</context-param>`
18.  
19. ``
20. `<servlet>`
21. `<servlet-name>springDispatcherServlet</servlet-name>`
22. `<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>`
23. ``
24. `<init-param>`
25. `<param-name>contextConfigLocation</param-name>`
26. `<param-value>classpath:spring-mvc.xml</param-value>`
27. `</init-param>`
28. `<load-on-startup>1</load-on-startup>`
29. `</servlet>`
30. `<servlet-mapping>`
31. `<servlet-name>springDispatcherServlet</servlet-name>`
32. `<url-pattern>/</url-pattern>`
33. `</servlet-mapping>`
34.  
35. ``
36. `<listener>`
37. `<listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>`
38. `</listener>`
39. `<filter>`
40. `<filter-name>singleSignOutFilter</filter-name>`
41. `<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>`
42. `</filter>`
43. `<filter-mapping>`
44. `<filter-name>singleSignOutFilter</filter-name>`
45. `<url-pattern>/*</url-pattern>`
46. `</filter-mapping>`
47.  
48. ``
49. `<filter>`
50. `<filter-name>shiroFilter</filter-name>`
51. `<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>`
52. `<init-param>`
53. `<param-name>targetFilterLifecycle</param-name>`
54. `<param-value>true</param-value>`
55. `</init-param>`
56. `</filter>`
57. `<filter-mapping>`
58. `<filter-name>shiroFilter</filter-name>`
59. `<url-pattern>/*</url-pattern>`
60. `</filter-mapping>`
61. `</web-app>`

先发个整体项目图

![20170726155437780][]

在resources目录下新建spring-mvc.xml

在resources目录下新建applicationContext-web.xml

在resources目录下新建applicationContext-shiro.xml，主要是login和logout两个过滤器

1.  `<?xml version="1.0" encoding="UTF-8"?>`
2.  `<beans xmlns="http://www.springframework.org/schema/beans"`
3.  `xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"`
4.  `xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">`
5.   
6.  `<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">`
7.  `<property name="securityManager" ref="securityManager"/>`
8.  ``
9.  `<property name="loginUrl" value="${shiro.loginUrl}" />`
10. `<property name="filters">`
11. `<map>`
12. ``
13. `<entry key="casFilter" value-ref="casFilter" />`
14. `<entry key="logoutFilter" value-ref="logoutFilter" />`
15. `</map>`
16. `</property>`
17. `<property name="filterChainDefinitions">`
18. `<value>`
19. ``
20. `/login = casFilter`
21. `/logout = logoutFilter`
22. `/** = authc`
23. `</value>`
24. `</property>`
25. `</bean>`
26.  
27. `<bean id="casFilter" class="org.apache.shiro.cas.CasFilter">`
28. ``
29. `<property name="failureUrl" value="${shiro.loginUrl}" />`
30. `<property name="successUrl" value="${shiro.successUrl}" />`
31. `</bean>`
32.  
33. `<bean id="logoutFilter" class="org.apache.shiro.web.filter.authc.LogoutFilter">`
34. `<property name="redirectUrl" value="${shiro.logoutUrl}" />`
35. `</bean>`
36.  
37. ``
38. `<bean name="singleSignOutFilter"`
39. `class="org.jasig.cas.client.session.SingleSignOutFilter">`
40. `<property name="casServerUrlPrefix" value="${shiro.cas.serverUrlPrefix}"/>`
41. `</bean>`
42.  
43. `<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">`
44. `<property name="realm" ref="shiroDbRealm"/>`
45. `<property name="subjectFactory" ref="casSubjectFactory"></property>`
46. `</bean>`
47.  
48. `<bean id="casSubjectFactory" class="org.apache.shiro.cas.CasSubjectFactory"></bean>`
49.  
50. `<bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>`
51.  
52. `<bean id="shiroDbRealm" class="com.test.security.ShiroDbRealm">`
53. `<property name="authorizationCachingEnabled" value="false"/>`
54. ``
55. `<property name="casServerUrlPrefix" value="${shiro.cas.serverUrlPrefix}" />`
56. ``
57. `<property name="casService" value="${shiro.cas.service}" />`
58. `</bean>`
59. `</beans>`

在resources目录下新建shiro.properties

1.  `#shiro`
2.  `shiro.loginUrl=https://localhost:9001/cas/login?service=https://localhost:9004/test3/login`
3.  `shiro.logoutUrl=https://localhost:9001/cas/logout?service=https://localhost:9004/test3/login`
4.  `shiro.cas.serverUrlPrefix=https://localhost:9001/cas`
5.  `shiro.cas.service=https://localhost:9004/test3/login`
6.  `shiro.failureUrl=/error`
7.  `shiro.successUrl=/success`

接下来是几个类建立

在com.test.controller包下新建LoginController.java，不解释

1.  `package com.test.controller;`
2.   
3.  `import org.slf4j.Logger;`
4.  `import org.slf4j.LoggerFactory;`
5.  `import org.springframework.stereotype.Controller;`
6.  `import org.springframework.web.bind.annotation.RequestMapping;`
7.   
8.  `@Controller`
9.  `public class LoginController {`
10. `private static final Logger logger = LoggerFactory.getLogger(LoginController.class);`
11.  
12. `@RequestMapping("/success")`
13. `public String success(){`
14. `logger.info("登录成功");`
15. `return "success";`
16. `}`
17.  
18. `@RequestMapping("/error")`
19. `public String error(){`
20. `logger.info("登录失败");`
21. `return "error";`
22. `}`
23. `}`

在com.test.security包下新建Principal.java，这个用于保存账号登录信息

1.  `package com.test.security;`
2.   
3.  `import java.io.Serializable;`
4.   
5.  `public class Principal implements Serializable {`
6.   
7.  `private static final long serialVersionUID = -6577595270150512805L;`
8.   
9.  `private String id;`
10. `private String userName;`
11. `private String trueName;`
12. `private String email;`
13. `private boolean superUser;`
14.  
15. `public Principal(String id, String userName, String trueName, String email) {`
16. `this.id = id;`
17. `this.userName = userName;`
18. `this.trueName = trueName;`
19. `this.email = email;`
20. `}`
21.  
22. `public String getId() {`
23. `return id;`
24. `}`
25.  
26. `public void setId(String id) {`
27. `this.id = id;`
28. `}`
29.  
30. `public String getUserName() {`
31. `return userName;`
32. `}`
33.  
34. `public void setUserName(String userName) {`
35. `this.userName = userName;`
36. `}`
37.  
38. `public String getTrueName() {`
39. `return trueName;`
40. `}`
41.  
42. `public void setTrueName(String trueName) {`
43. `this.trueName = trueName;`
44. `}`
45.  
46. `public String getEmail() {`
47. `return email;`
48. `}`
49.  
50. `public void setEmail(String email) {`
51. `this.email = email;`
52. `}`
53.  
54. `public boolean isSuperUser() {`
55. `return superUser;`
56. `}`
57.  
58. `public void setSuperUser(boolean superUser) {`
59. `this.superUser = superUser;`
60. `}`
61.  
62. `}`

在com.test.security包下新建ShiroDbRealm.java，这个用于自定义登录验证及权限验证

1.  `package com.test.security;`
2.   
3.  `import org.apache.shiro.authc.AuthenticationException;`
4.  `import org.apache.shiro.authc.AuthenticationInfo;`
5.  `import org.apache.shiro.authc.AuthenticationToken;`
6.  `import org.apache.shiro.authc.SimpleAuthenticationInfo;`
7.  `import org.apache.shiro.authz.AuthorizationInfo;`
8.  `import org.apache.shiro.authz.SimpleAuthorizationInfo;`
9.  `import org.apache.shiro.cas.CasAuthenticationException;`
10. `import org.apache.shiro.cas.CasToken;`
11. `import org.apache.shiro.subject.PrincipalCollection;`
12. `import org.apache.shiro.subject.SimplePrincipalCollection;`
13. `import org.apache.shiro.util.StringUtils;`
14. `import org.jasig.cas.client.authentication.AttributePrincipal;`
15. `import org.jasig.cas.client.validation.Assertion;`
16. `import org.jasig.cas.client.validation.TicketValidationException;`
17. `import org.jasig.cas.client.validation.TicketValidator;`
18. `import org.slf4j.Logger;`
19. `import org.slf4j.LoggerFactory;`
20.  
21. `import java.util.ArrayList;`
22. `import java.util.List;`
23. `import java.util.Map;`
24.  
25. `public class ShiroDbRealm extends org.apache.shiro.cas.CasRealm {`
26. `private static Logger log = LoggerFactory.getLogger(ShiroDbRealm.class);`
27.  
28. `/**`
29. `* 设置权限信息`
30. `*/`
31. `@Override`
32. `protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {`
33. `Principal principal = (Principal) principals.getPrimaryPrincipal();`
34. `if (principal == null) {`
35. `return null;`
36. `}`
37. `SimpleAuthorizationInfo simpleAuthorizationInfo = new SimpleAuthorizationInfo();`
38. `// TODO:权限获取`
39. `List<String> permissions = new ArrayList();`
40. `permissions.add("...");`
41. `simpleAuthorizationInfo.addStringPermissions(permissions);`
42. `return simpleAuthorizationInfo;`
43. `}`
44.  
45.  
46. `/**`
47. `* 在原CasRealm方法上做调整`
48. `* @param token`
49. `* @return`
50. `* @throws AuthenticationException`
51. `*/`
52. `@Override`
53. `protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {`
54. `CasToken casToken = (CasToken)token;`
55. `if(token == null) {`
56. `return null;`
57. `} else {`
58. `String ticket = (String)casToken.getCredentials();`
59. `if(!StringUtils.hasText(ticket)) {`
60. `return null;`
61. `} else {`
62. `TicketValidator ticketValidator = this.ensureTicketValidator();`
63.  
64. `try {`
65. `Assertion e = ticketValidator.validate(ticket, this.getCasService());`
66. `AttributePrincipal casPrincipal = e.getPrincipal();`
67. `String userId = casPrincipal.getName();`
68. `log.debug("Validate ticket : {} in CAS server : {} to retrieve user : {}", new Object[]{ticket, this.getCasServerUrlPrefix(), userId});`
69. `Map attributes = casPrincipal.getAttributes();`
70. `casToken.setUserId(userId);`
71. `String rememberMeAttributeName = this.getRememberMeAttributeName();`
72. `String rememberMeStringValue = (String)attributes.get(rememberMeAttributeName);`
73. `boolean isRemembered = rememberMeStringValue != null && Boolean.parseBoolean(rememberMeStringValue);`
74. `if(isRemembered) {`
75. `casToken.setRememberMe(true);`
76. `}`
77.  
78. `//List principals = CollectionUtils.asList(new Object[]{userId, attributes});`
79. `//使用自定义的Principal`
80. `Principal principals=new Principal("id", userId, "trueName", "email");`
81. `SimplePrincipalCollection principalCollection = new SimplePrincipalCollection(principals, this.getName());`
82. `return new SimpleAuthenticationInfo(principalCollection, ticket);`
83. `} catch (TicketValidationException var14) {`
84. `throw new CasAuthenticationException("Unable to validate ticket [" + ticket + "]", var14);`
85. `}`
86. `}`
87. `}`
88. `}`
89. `}`

还剩两个简单的jsp页面

在WEB-INF/view下新建success.jsp

1.  `<%@ page contentType="text/html;charset=UTF-8" language="java" %>`
2.  `<%@ taglib prefix="shiro" uri="http://shiro.apache.org/tags" %>`
3.  `<html>`
4.  `<head>`
5.  `<title></title>`
6.  `</head>`
7.  `<body>`
8.  `<h1>success</h1>`
9.  `<shiro:principal property="userName"/>`
10. `<a href="https://localhost:9004/test3/logout">单点登出</a>`
11. `</body>`
12. `</html>`

在WEB-INF/view下新建error.jsp

1.  `<%@ page contentType="text/html;charset=UTF-8" language="java" %>`
2.  `<html>`
3.  `<head>`
4.  `<title></title>`
5.  `</head>`
6.  `<body>`
7.  `<h1>error</h1>`
8.  `</body>`
9.  `</html>`

到这边就可以启动Tomcat看效果了，在引用Shiro的CAS相关类的时候会提示过期，因为Shiro把各种协议都整合到一个新包去了

![20170726161059842][]

三、小结

整合完成了，不算复杂，CAS Server比较吃内存，可以调大点，CAS Client也可以下载源码来打包

转载：[https://blog.csdn.net/tsfdez/article/details/76087587][https_blog.csdn.net_tsfdez_article_details_76087587]

[20170725172611440]: /images/20220519/45cefce25b7c43ab8ea1fc35b140962b.png
[20170726155437780]: /images/20220519/065f4159903644998fec47c98896e974.png
[20170726161059842]: /images/20220519/7d1bfb0c37a94558aff9c7017b9ff43f.png
[https_blog.csdn.net_tsfdez_article_details_76087587]: https://blog.csdn.net/tsfdez/article/details/76087587