基于 Cookie 的 SSO 中间件 kisso

电玩女神 2022-09-26 03:15 114阅读 0赞

kisso  =  cookie sso

基于 Cookie 的 SSO 中间件，它是一把快速开发 java Web 登录系统（SSO）的瑞士军刀。欢迎大家使用 kisso !!

![121717_Rl6y_241218.png][]

[kisso 帮助文档下载][kisso]

1、支持单点登录

2、支持登录Cookie缓存

3、支持防止 xss攻击, SQL注入，脚本注入

4、支持 Base64 / MD5 / AES / PBE / RSA 算法

5、支持浏览器客户端校验

6、支持Cookie参数配置及扩展

7、支持跨域登录，模拟登录

8、支持在线人数统计

9、支持生成动态图片验证码

10、支持 app 移动端 api 服务验证，采用微信公众平台 api 验证机制认证

11、自带权限验证逻辑，支持基础 Shiro , SpringSecurity 权限系统

[kisso 依赖 jars][kisso _ jars]

[kisso\_oauth2 演示 demo][kisso_oauth2_ demo]

[kisso\_ApiServer 移动 APP 端 API 演示 demo][kisso_ApiServer _ APP _ API _ demo]

[kisso\_JFinal 演示 demo][kisso_JFinal _ demo]

[kisso\_SpringMvc 演示 demo][kisso_SpringMvc _ demo]

[kisso\_crossdomain 跨域演示 demo][kisso_crossdomain _ demo]

[实例演示 SSM 架构后台管理系统][SSM]

Maven 坐标：

[http://search.maven.org/\#search%7Cgav%7C1%7Cg%3A%22com.baomidou%22%20AND%20a%3A%22kisso%22][http_search.maven.org_search_7Cgav_7C1_7Cg_3A_22com.baomidou_22_20AND_20a_3A_22kisso_22]

[?][Link 1]

<table style="width:710px; margin:0px!important; padding:0px!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; background:none!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; font-size:1em!important; min-height:auto!important"> 
 <tbody style="margin:0px!important; padding:0px!important; background:none!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important"> 
  <tr style="margin:0px!important; padding:0px!important; background:none!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important"> 
   <td style="margin:0px!important; padding:0px!important; background:none!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important; color:rgb(175,175,175)!important"> 
    <div style="margin:0px!important; padding:0px 0.5em 0px 1em!important; border-width:0px 3px 0px 0px!important; border-top-style:initial!important; border-right-style:solid!important; border-bottom-style:initial!important; border-left-style:initial!important; border-top-color:initial!important; border-right-color:rgb(108,226,108)!important; border-bottom-color:initial!important; border-left-color:initial!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; text-align:right!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important">
      1 
    </div> 
    <div style="margin:0px!important; padding:0px 0.5em 0px 1em!important; border-width:0px 3px 0px 0px!important; border-top-style:initial!important; border-right-style:solid!important; border-bottom-style:initial!important; border-left-style:initial!important; border-top-color:initial!important; border-right-color:rgb(108,226,108)!important; border-bottom-color:initial!important; border-left-color:initial!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; text-align:right!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important">
      2 
    </div> 
    <div style="margin:0px!important; padding:0px 0.5em 0px 1em!important; border-width:0px 3px 0px 0px!important; border-top-style:initial!important; border-right-style:solid!important; border-bottom-style:initial!important; border-left-style:initial!important; border-top-color:initial!important; border-right-color:rgb(108,226,108)!important; border-bottom-color:initial!important; border-left-color:initial!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; text-align:right!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important">
      3 
    </div> 
    <div style="margin:0px!important; padding:0px 0.5em 0px 1em!important; border-width:0px 3px 0px 0px!important; border-top-style:initial!important; border-right-style:solid!important; border-bottom-style:initial!important; border-left-style:initial!important; border-top-color:initial!important; border-right-color:rgb(108,226,108)!important; border-bottom-color:initial!important; border-left-color:initial!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; text-align:right!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important">
      4 
    </div> 
    <div style="margin:0px!important; padding:0px 0.5em 0px 1em!important; border-width:0px 3px 0px 0px!important; border-top-style:initial!important; border-right-style:solid!important; border-bottom-style:initial!important; border-left-style:initial!important; border-top-color:initial!important; border-right-color:rgb(108,226,108)!important; border-bottom-color:initial!important; border-left-color:initial!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; text-align:right!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important">
      5 
    </div> </td> 
   <td style="width:679px; margin:0px!important; padding:0px!important; background:none!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important"> 
    <div style="margin:0px!important; padding:0px!important; background:none!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:relative!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important"> 
     <div style="margin:0px!important; padding:0px 1em!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important"> 
      <code style="white-space:nowrap; margin:0px!important; padding:0px!important; border:0px!important; background:none!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important">&lt;dependency&gt;</code> 
     </div> 
     <div style="margin:0px!important; padding:0px 1em!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important"> 
      <code style="white-space:nowrap; margin:0px!important; padding:0px!important; border:0px!important; background:none!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important">&nbsp;&nbsp;&nbsp;&nbsp;</code> 
      <code style="white-space:nowrap; margin:0px!important; padding:0px!important; border:0px!important; background:none!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important">&lt;groupId&gt;com.baomidou&lt;/groupId&gt;</code> 
     </div> 
     <div style="margin:0px!important; padding:0px 1em!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important"> 
      <code style="white-space:nowrap; margin:0px!important; padding:0px!important; border:0px!important; background:none!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important">&nbsp;&nbsp;&nbsp;&nbsp;</code> 
      <code style="white-space:nowrap; margin:0px!important; padding:0px!important; border:0px!important; background:none!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important">&lt;artifactId&gt;kisso&lt;/artifactId&gt;</code> 
     </div> 
     <div style="margin:0px!important; padding:0px 1em!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important"> 
      <code style="white-space:nowrap; margin:0px!important; padding:0px!important; border:0px!important; background:none!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important">&nbsp;&nbsp;&nbsp;&nbsp;</code> 
      <code style="white-space:nowrap; margin:0px!important; padding:0px!important; border:0px!important; background:none!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important">&lt;version&gt;Maven 官方最新版本为准&lt;/version&gt;</code> 
     </div> 
     <div style="margin:0px!important; padding:0px 1em!important; border:0px!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-size:1em!important; min-height:auto!important; white-space:pre!important"> 
      <code style="white-space:nowrap; margin:0px!important; padding:0px!important; border:0px!important; background:none!important; bottom:auto!important; float:none!important; height:auto!important; left:auto!important; line-height:1.1em!important; outline:0px!important; overflow:visible!important; position:static!important; right:auto!important; top:auto!important; vertical-align:baseline!important; width:auto!important; font-family:Consolas,&quot;Bitstream Vera Sans Mono&quot;,&quot;Courier New&quot;,Courier,monospace!important; font-size:1em!important; min-height:auto!important">&lt;/dependency&gt;</code> 
     </div> 
    </div> </td> 
  </tr> 
 </tbody> 
</table>

（1）、kisso 是什么，与 cas 区别 ？

1、cas 是单点登录系统，它给你制定好了规则按照它的要求做就可以，配置（复杂）好一切即可实现单点登录。

2、kisso 是一个中间件，提供 cookie 搭建 java web sso 的组件式解决方案。你不管使用任何架构都可以使用它，就像一个 U 盘需要使用就插入、不用就拔掉。

3、cas 集中验证，所有请求都由 cas 集中验证，缺点cas服务压力巨大。kisso 分散验证，由各个系统验证 cookie 合法性，缺点秘钥要保护好。

（2）、为什么是 cookie 而不是 session 它们有何区别 ？

kisso 采用的是加密会话 cookie 浏览器关闭立即失效，同时支持后台登录超时自动退出，支持客户端浏览器验证、访问 ip 及 cookie 安全配置等。

1、session 存放在服务器端，cookie 存放在客户端，存在 2 种状态：“ 第一种：持久 cookie 具有时效性，以文件的形式存放在客户机硬盘中，时间一到生命周期结束自动被删除。第二种：临时 cookie 又叫会话 cookie 放在浏览器内存中，浏览器关闭生命周期结束自动失效 ”。

2、单纯不做任何改变而言 session 更安全，如果 cookie 采取各种安全保护措施，此时的 cookie 一样安全。

3、cookie 轻松实现分布式服务部署，单点登录跨域访问等问题，换成 session 需要处理 session 复制及各种问题实现困难。

（3）、经常被问及的问题 ？

在此重申下，下载源码的朋友先按照 demo 提供的例子运行跑通后，再修改不要上来就急急忙忙改，不会了就截图发问，这样一则没有理解透彻实现原理，二则耽误别人的时间，实在是得不偿失。

1、跨域是什么 ？ 这里跨域有 2 种  ：

第一种、同一个根域名不同子域名，比如 my.baomidou.com 、  sso.baomidou.com  、other.baomidou.com 此时配置  domain 只需要配置   .baomidou.com  即可。

查看普通 demo ： [kisso\_JFinal 演示 demo][kisso_JFinal _ demo]   [kisso\_SpringMvc 演示 demo][kisso_SpringMvc _ demo]

第二种、完全不同的域名，比如  sso.baomidou.com     git.oschina.net 此时比较复杂 kisso 采用的是 rsa 加密询问验证（较复杂）

查看跨域 demo: [kisso\_crossdomain 跨域演示 demo][kisso_crossdomain _ demo]

2、改成 ip 支持么 ？

支持！ 注意访问时候使用 ip 访问，domain 的配置 ip 即可，不要是  .192.168.1.3  注意此时不要在前面加个  .  点。

3、sso.properties  怎么去配置 ？

除了密钥、域名、必须修改，其他默认配置或根据需要选择配置即可 [查考点击][Link 2] 根据自己的需求选择配置。

很多朋友问？都谁在用 kisso !?

不要问我星星有几颗， 我会告诉你很多很多！！（保密）

（1）sso 登录状态

![143728_7g40_241218.jpg][]

##     ##

## （2）跨域登录    ##

![133529_ZRWf_241218.jpg][]

## hosts: ##

127.0.0.1 sso.test.com

127.0.0.1 my.web.com

访问 my.web.com:8090/index.html 如果未登录会重定向至sso域登录页面

![104233_nTX0_241218.jpg][]

登录成功 my.web.com 如图

![104252_6w4w_241218.jpg][]

普通登录

![164306_IGVe_241218.png][]

![164322_b5yk_241218.png][]

[121717_Rl6y_241218.png]: /images/20220717/2e9cee83c0df4b3fae3d6f7b07288bb6.png
[kisso]: http://git.oschina.net/juapk/kisso/attach_files
[kisso _ jars]: http://git.oschina.net/juapk/kisso/wikis/kisso-%E4%BE%9D%E8%B5%96%E5%8C%85-jars
[kisso_oauth2_ demo]: http://git.oschina.net/juapk/kisso-oauth2-demo
[kisso_ApiServer _ APP _ API _ demo]: http://git.oschina.net/juapk/kisso_apiserver
[kisso_JFinal _ demo]: http://git.oschina.net/juapk/kisso_jfinal
[kisso_SpringMvc _ demo]: http://git.oschina.net/juapk/kisso_springmvc
[kisso_crossdomain _ demo]: http://git.oschina.net/juapk/kisso_crossdomain
[SSM]: http://git.oschina.net/juapk/SpringWind
[http_search.maven.org_search_7Cgav_7C1_7Cg_3A_22com.baomidou_22_20AND_20a_3A_22kisso_22]: http://search.maven.org/#search%7Cgav%7C1%7Cg%3A%22com.baomidou%22%20AND%20a%3A%22kisso%22
[Link 1]: http://www.oschina.net/p/kisso#
[Link 2]: http://git.oschina.net/juapk/kisso/blob/master/kisso/src/main/resources/sso.properties/?dir=0&filepath=kisso/src/main/resources/sso.properties&oid=4d62ff57eb02263b3a87609a7c29d171ef3d836a&sha=f53c0e3483b51e5c539bc02c581b563fc48c6aed
[143728_7g40_241218.jpg]: /images/20220717/bbce05876b0742d681acd7b202f67528.png
[133529_ZRWf_241218.jpg]: /images/20220717/d851e44da1364aaba707cae65ef317ea.png
[104233_nTX0_241218.jpg]: /images/20220717/ae8deb233ad74d029ea90da6e098ea20.png
[104252_6w4w_241218.jpg]: /images/20220717/bf9d60ab4a8f4082b0ba897d9210da4e.png
[164306_IGVe_241218.png]: /images/20220717/e4ad101ad0f44341a3eec4b1696699da.png
[164322_b5yk_241218.png]: /images/20220717/5d7020c085db49d388a74916490742f3.png