CAS服务器5.2.6图片验证码

本是古典何须时尚 2024-01-20 08:15 5阅读 0赞

在login-webflow.xml中,可以看到登陆的用户名和密码信息绑定到了credential这个对象上.

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70][]

那credential这个model到底是哪个类呢?

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 1][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 2][]

源码：

//DefaultWebflowConfigurer
     protected void createRememberMeAuthnWebflowConfig(Flow flow) {
             //是否开启了记住我功能
            if (this.casProperties.getTicket().getTgt().getRememberMe().isEnabled()) {
                this.createFlowVariable(flow, "credential", RememberMeUsernamePasswordCredential.class);
                ViewState state = (ViewState)this.getState(flow, "viewLoginForm", ViewState.class);
                BinderConfiguration cfg = this.getViewStateBinderConfiguration(state);
                cfg.addBinding(new Binding("rememberMe", (String)null, false));
            } else {
                this.createFlowVariable(flow, "credential", UsernamePasswordCredential.class);
            }
    
        }

配置自定义handler和认证类：

public class RememberMeUsernamePasswordCaptchaCredential extends RememberMeUsernamePasswordCredential {
    
        @Size(min = 5,max = 5, message = "require captcha")
        private String captcha;
    
        public String getCaptcha() {
            return captcha;
        }
    
        public void setCaptcha(String captcha) {
            this.captcha = captcha;
        }
    
        @Override
        public int hashCode() {
            return new HashCodeBuilder()
                    .appendSuper(super.hashCode())
                    .append(this.captcha)
                    .toHashCode();
        }
    }

配置：login-webflow.xml

<view-state id="viewLoginForm" view="casLoginView" model="credential">
            <binder>
                <binding property="username" required="true"/>
                <binding property="password" required="true"/>
                <binding property="captcha" required="false"/>
            </binder>
            <transition on="submit" bind="true" validate="true" to="realSubmit" history="invalidate"/>
        </view-state>

登陆页面：

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html  xmlns:th="http://www.thymeleaf.org">
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
        <title th:text="${#themes.code('cas.page.title')}"></title>
        <script type="text/javascript" th:src="@{/themes/js/jquery-1.4.2.min.js}" ></script>
        <script type="text/css" th:src="@{/themes/css/cas.css}" ></script>
        <script type="text/javascript">
            function refreshCaptcha(){
                $("#captcha_img").attr("src","/cas/captcha.jpg?id=" + new Date() + Math.floor(Math.random()*24));
            }
        </script>
    </head>
    <body>
    <h2 th:text="${#themes.code('cas.page.title')}"></h2>
    <div>
        <form method="post" th:object="${credential}">
            <div th:if="${#fields.hasErrors('*')}">
                <span th:each="err : ${#fields.errors('*')}" th:utext="${err}" style="color: red" />
            </div>
            <h4 th:utext="#{screen.welcome.instructions}"></h4>
            <section class="row">
                <label for="username" th:utext="#{screen.welcome.label.netid}" />
                <div th:unless="${openIdLocalId}">
                    <input class="required" id="username" size="25" tabindex="1" type="text"
                           th:disabled="${guaEnabled}"
                           th:field="*{username}"
                           th:accesskey="#{screen.welcome.label.netid.accesskey}"
                           autocomplete="off"
                           th:value="admin" />
                </div>
            </section>
            <section class="row">
                <label for="password" th:utext="#{screen.welcome.label.password}"/>
                <div>
                    <input class="required" type="password" id="password" size="25" tabindex="2"
                           th:accesskey="#{screen.welcome.label.password.accesskey}"
                           th:field="*{password}"
                           autocomplete="off"
                           th:value="123456" />
                </div>
            </section>
           <section class="row" >
                <div>
                    <input type="text" class="required" size="25" tabindex="2"
                           id="captcha"
                           placeholder="验证码"
                           th:field="*{captcha}" autocomplete="off"/>
                    <img th:src="@{/captcha.jpg}" id="captcha_img" onclick="refreshCaptcha()"/>
                </div>
            </section>
            <section class="form-check" th:if="${rememberMeAuthenticationEnabled}">
                <p>
                    <input type="checkbox" name="rememberMe" id="rememberMe" value="true" tabindex="5"/>
                    <label for="rememberMe" th:text="#{screen.rememberme.checkbox.title}">Remember Me</label>
                </p>
            </section>
            <section>
                <input type="hidden" name="execution" th:value="${flowExecutionKey}" />
                <input type="hidden" name="_eventId" value="submit" />
                <input type="hidden" name="geolocation" />
                <input class="btn btn-submit btn-block" name="submit" accesskey="l" th:value="#{screen.welcome.button.login}" tabindex="6" type="submit" />
            </section>
        </form>
    </div>
    </body>
    </html>

从DefaultWebflowConfigurer源码如果开启了RememberMe的功能就使用 `RememberMeUsernamePasswordCredential` 如果没有就使用 `UsernamePasswordCredential`了，因而此处做了调整。加入自定义属性用于判断不同情况，使用不同的处理器。

my.properties：

#是否开启了图片验证码
    myDefition.captchaEnabled=false

自定义Credential表单信息。

public class CaptchaWebflowConfigurer extends DefaultWebflowConfigurer {
    
    
    
        public CaptchaWebflowConfigurer(FlowBuilderServices flowBuilderServices, FlowDefinitionRegistry loginFlowDefinitionRegistry, ApplicationContext applicationContext, CasConfigurationProperties casProperties) {
            super(flowBuilderServices, loginFlowDefinitionRegistry, applicationContext, casProperties);
        }
    
    
        @Override
        protected void createRememberMeAuthnWebflowConfig(Flow flow) {
    
            String captchaEnabled=null;
            try {
                Properties properties = PropertiesLoaderUtils.loadAllProperties("my.properties");
                captchaEnabled=properties.getProperty("myDefition.captchaEnabled");
            }catch (Exception e){
                e.printStackTrace();
            }
            //不带验证码
            if(captchaEnabled==null && casProperties.getTicket().getTgt().getRememberMe().isEnabled()){
                createFlowVariable(flow, CasWebflowConstants.VAR_ID_CREDENTIAL, RememberMeUsernamePasswordCredential.class);
                final ViewState state = getState(flow, CasWebflowConstants.STATE_ID_VIEW_LOGIN_FORM, ViewState.class);
                final BinderConfiguration cfg = getViewStateBinderConfiguration(state);
                cfg.addBinding(new BinderConfiguration.Binding("rememberMe", null, false));
                cfg.addBinding(new BinderConfiguration.Binding("captcha", null, true));
                //带验证码
            }else if(captchaEnabled !=null && "true".equals(captchaEnabled) && casProperties.getTicket().getTgt().getRememberMe().isEnabled()){
                createFlowVariable(flow, CasWebflowConstants.VAR_ID_CREDENTIAL, RememberMeUsernamePasswordCaptchaCredential.class);
                final ViewState state = getState(flow, CasWebflowConstants.STATE_ID_VIEW_LOGIN_FORM, ViewState.class);
                final BinderConfiguration cfg = getViewStateBinderConfiguration(state);
                cfg.addBinding(new BinderConfiguration.Binding("rememberMe", null, false));
                cfg.addBinding(new BinderConfiguration.Binding("captcha", null, true));
            }else{
                createFlowVariable(flow, CasWebflowConstants.VAR_ID_CREDENTIAL, UsernamePasswordCredential.class);
    
            }
        }
    
    }

分为三种情况：

1.即开启了图片验证码也使用了记住我功能--RememberMeUsernamePasswordCaptchaCredential

2.只开启了记住我--RememberMeUsernamePasswordCredential

3.都没有开启 -- UsernamePasswordCredential

RememberMeUsernamePasswordCaptchaCredential所对应的处理器是自定义UsernamePasswordCaptchaAuthenticationHandler

public class UsernamePasswordCaptchaAuthenticationHandler extends AbstractPreAndPostProcessingAuthenticationHandler {
    
    
        private UserService userService;
    
    
        public UserService getUserService() {
            return userService;
        }
    
        public void setUserService(UserService userService) {
            this.userService = userService;
        }
    
        public UsernamePasswordCaptchaAuthenticationHandler(String name, ServicesManager servicesManager, PrincipalFactory principalFactory, Integer order) {
            super(name, servicesManager, principalFactory, order);
        }
    
        @Override
        protected HandlerResult doAuthentication(Credential credential) throws GeneralSecurityException, PreventedException {
            RememberMeUsernamePasswordCaptchaCredential myCredential = (RememberMeUsernamePasswordCaptchaCredential) credential;
            String requestCaptcha = myCredential.getCaptcha();
            ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
            Object attribute = attributes.getRequest().getSession().getAttribute("captcha");
    
            String realCaptcha = attribute == null ? null : attribute.toString();
    
            if(StringUtils.isBlank(requestCaptcha) || !requestCaptcha.toUpperCase().equals(realCaptcha)){
                throw new CaptchaException("验证码错误");
            }
            String username = myCredential.getUsername();
            MyEncoder myEncoder=new MyEncoder();
            String password = myCredential.getUsername();
            Map<String, Object> user = userService.findByUserName(username);
    
            //可以在这里直接对用户名校验,或者调用 CredentialsMatcher 校验
            if (user == null) {
                throw new AccountRoleException("用户不存在！");
            }
            CharSequence cs=user.get("password").toString();
            //这里将 密码对比 注销掉,否则 无法锁定  要将密码对比 交给 密码比较器 在这里可以添加自己的密码比较器等
            if (myEncoder.matches(cs,password)) {
                throw new AccountCodeException("用户名或密码错误！");
            }
            if ("1".equals(user.get("state"))) {
                throw new LockedAccountException("账号已被锁定,请联系管理员！");
            }
            return createHandlerResult(credential, this.principalFactory.createPrincipal(username),new ArrayList<>(0));
        }
    
        @Override
        public boolean supports(Credential credential) {
            return credential instanceof RememberMeUsernamePasswordCaptchaCredential;
        }
    }

其余的使用的自定义处理器：MyUserNamePasswordAuthenticationHandler

public  class MyUserNamePasswordAuthenticationHandler extends AbstractUsernamePasswordAuthenticationHandler {
    
        private UserService userService;
        public UserService getUserService() {
            return userService;
        }
    
        public void setUserService(UserService userService) {
            this.userService = userService;
        }
    
        public MyUserNamePasswordAuthenticationHandler(String name, ServicesManager servicesManager, PrincipalFactory principalFactory, Integer order) {
            super(name, servicesManager, principalFactory, order);
        }
    
        @Override
        protected HandlerResult authenticateUsernamePasswordInternal(UsernamePasswordCredential myCredential, String originalPassword) throws GeneralSecurityException, PreventedException {
            String username = myCredential.getUsername();
            MyEncoder myEncoder=new MyEncoder();
            String password = myCredential.getUsername();
            Map<String, Object> user = userService.findByUserName(username);
    
            //可以在这里直接对用户名校验,或者调用 CredentialsMatcher 校验
            if (user == null) {
                throw new AccountRoleException("用户不存在！");
            }
            CharSequence cs=user.get("password").toString();
            //这里将 密码对比 注销掉,否则 无法锁定  要将密码对比 交给 密码比较器 在这里可以添加自己的密码比较器等
            if (myEncoder.matches(cs,password)) {
                throw new AccountCodeException("用户名或密码错误！");
            }
            if ("1".equals(user.get("state"))) {
                throw new LockedAccountException("账号已被锁定,请联系管理员！");
            }
            return createHandlerResult(myCredential, this.principalFactory.createPrincipal(username),new ArrayList<>(0));
        }
    }

结果如图：

![20190615024527301.png][] ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 3][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/20/d128b99fa1e243c594c894d9f4113298.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 1]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/20/ce7cadf5c011446fa23a0f5197c3af0e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 2]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/20/ae084edca86746069cba8957dc3d3ad2.png
[20190615024527301.png]: https://img-blog.csdnimg.cn/20190615024527301.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 3]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/20/8f3dbed921e7430ea44e75e1ac8d8b8a.png