單點登錄(四)cas客戶端配置

拿一個例子來說明cas客戶端配置,新建一動態web工程cas-client1，這裏使用的是maven來創建。

1. 在pom文件中引入maven依賴

		<dependency>
			<groupId>org.jasig.cas.client</groupId>
			<artifactId>cas-client-core</artifactId>
			<version>3.1.11</version>
		</dependency>

2.在web.xml裏面配置過濾器

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee 
	http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
	<display-name>my test app</display-name>

	<context-param>
	<param-name>contextConfigLocation</param-name>
	<param-value>classpath*:applicationContext-cas.xml</param-value>
	</context-param>
	

	<!-- ======================== 單點登錄開始 ======================== -->
	<!-- 用於單點退出，該過濾器用於實現單點登出功能，可選配置 -->
	<listener>
		<listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
	</listener>

	<!-- 該過濾器用於實現單點登出功能，可選配置。 -->
	<filter>
		<filter-name>CAS Single Sign Out Filter</filter-name>
		<filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
	</filter>
	<filter-mapping>
		<filter-name>CAS Single Sign Out Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<!-- 該過濾器負責用戶的認證工作，必須啓用它 -->
	<filter>
		<filter-name>CAS Authentication Filter</filter-name>
		<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
		<init-param>
			<param-name>targetBeanName</param-name>
			<param-value>authenticationFilter</param-value>
		</init-param>
	</filter>
	<filter-mapping>
		<filter-name>CAS Authentication Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>
	<!-- 該過濾器負責對Ticket的校驗工作，必須啓用它 -->
	<filter>
		<filter-name>CAS Validation Filter</filter-name>
		<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
		<init-param>
			<param-name>targetBeanName</param-name>
			<param-value>ticketValidationFilter</param-value>
		</init-param>
	</filter>

	<filter-mapping>
		<filter-name>CAS Validation Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>



	<!-- 該過濾器負責實現HttpServletRequest請求的包裹， 比如允許開發者通過HttpServletRequest的getRemoteUser()方法獲得SSO登錄用戶的登錄名，可選配置。 -->
	<filter>
		<filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
		<filter-class>
			org.jasig.cas.client.util.HttpServletRequestWrapperFilter
		</filter-class>
	</filter>
	<filter-mapping>
		<filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<!-- 該過濾器使得開發者可以通過org.jasig.cas.client.util.AssertionHolder來獲取用戶的登錄名。 比如AssertionHolder.getAssertion().getPrincipal().getName()。 -->
	<filter>
		<filter-name>CAS Assertion Thread Local Filter</filter-name>
		<filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filter-class>
	</filter>
	<filter-mapping>
		<filter-name>CAS Assertion Thread Local Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<!-- 自定義的filter,在用戶登錄成功之後進行處理 -->
	<filter>
		<filter-name>AutoSetUserAdapterFilter</filter-name>
		<filter-class>td.sso.filter.AutoSetUserAdapterFilter</filter-class>
	</filter>
	<filter-mapping>
		<filter-name>AutoSetUserAdapterFilter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<listener>
		<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
	</listener>


	<!-- ======================== 單點登錄結束 ======================== -->

</web-app>

在web.xml中可以看出，這裏使用了spring的DelegatingFilterProxy對cas的filter進行了代理。裏面的兩個需要被過濾的url需要根據自己的業務進行配置，具體的filter在applicationContext-cas.xml配置的。

3.applicationContext-cas.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:context="http://www.springframework.org/schema/context"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
       http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd
       ">
	<context:property-placeholder location="classpath:cas-client.properties" />
	<bean name="authenticationFilter"
		class="org.jasig.cas.client.authentication.AuthenticationFilter">
		<property name="casServerLoginUrl" value="${cas.server.loginUrl}" />
		<property name="renew" value="${cas.server.renew}" />
		<property name="gateway" value="${cas.server.gateway}" />
		<property name="service" value="${cas.client.serverName}" />
	</bean>

	<!-- 對認證ticket進行校驗 -->
	<bean name="ticketValidationFilter"
		class="org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter">
		<property name="service" value="${cas.client.serverName}" />
		<property name="ticketValidator">
			<bean class="org.jasig.cas.client.validation.Cas10TicketValidator">
				<constructor-arg index="0" value="${cas.server.url}" />
			</bean>
		</property>
	</bean>

</beans>

這裏需要的注入參數是在cas-client.properties裏面進行配置的

cas.server.url=https://www.talkingdata.net:8446/
cas.server.loginUrl=https://www.talkingdata.net:8446/login
cas.server.renew=false
cas.server.gateway=false  
cas.client.serverName=http://localhost:8081/

4.AutoSetUserAdapterFilter

package td.sso.filter;

import java.io.IOException;
import java.util.Map;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;

import org.jasig.cas.client.util.AbstractCasFilter;
import org.jasig.cas.client.validation.Assertion;

/** 
 * @author xiaoxiao 
 * 日期：2013-7-30 下午3:05:21 
 * The default character set is UTF-8.
 */

public class AutoSetUserAdapterFilter  implements Filter {
	/**
	 * 過濾邏輯：首先判斷單點登錄的賬戶是否已經存在本系統中， 如果不存在使用用戶查詢接口查詢出用戶對象並設置在Session中
	 * 
	 * @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain)
	 */
	public void doFilter(ServletRequest request, ServletResponse response,
			FilterChain chain) throws IOException, ServletException {
		HttpServletRequest httpRequest = (HttpServletRequest) request;
		System.out.println("test>>>filter");
		// _const_cas_assertion_是CAS中存放登錄用戶名的session標誌
		Object object = httpRequest.getSession().getAttribute(
				AbstractCasFilter.CONST_CAS_ASSERTION);
		if (object != null) {
			Assertion assertion = (Assertion) object;
			Map<String, Object> map = assertion.getPrincipal().getAttributes();
			System.out.println(map);
			String loginName = assertion.getPrincipal().getName();
			System.out.println("用戶已經在SSO系統中登錄，登錄用戶名爲:" + loginName);
			String user = getCurrentUser(httpRequest);

			// 第一次登錄系統
			if (user == null) {
				System.out.println("用戶第一次登錄系統,保存session信息.");
				httpRequest.getSession().setAttribute("User_Info", loginName);
			} else {
				System.out.println("當前Session中的用戶信息爲:" + user);
			}

		}
		chain.doFilter(request, response);
	}

	private String getCurrentUser(HttpServletRequest request) {
		return (String) request.getSession().getAttribute("User_Info");
	}

	public void init(FilterConfig filterConfig) throws ServletException {
		// TODO Auto-generated method stub
		
	}

	public void destroy() {
		// TODO Auto-generated method stub
		
	}
}

5.客戶端登錄頁面

<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>Insert title here</title>
</head>
<body>
 	首頁,當前登錄用戶是:<%=session.getAttribute("User_Info") %>
	<br />
	<a href="https://www.talkingdata.net:8446/logout?service=http://localhost:8081/welcome.jsp">退出</a>
		<a href="http://localhost:8082">我要去client2</a>
</body>
</html>

由於在web.xml中對安全的攔截配置爲/*，所以該頁面是受保護的，需要用戶輸入用戶名和密碼才能使用。

爲了測試單點登錄在多個應用程序間是否生效，將上面創建的cas-client1複製一份，更名爲cas-client2，並將pom文件中tomcat使用的端口配置爲8082；並相應地修改cas-client.properties文件中的客戶端配置。

現在，依次啓動cas-server，cas-client1，cas-client2三個應用。

6. 測試

在瀏覽器中輸入地址:http://localhost:8081/,可以看到，瀏覽器已經自動跳轉到cas-server的登錄頁面，如下圖：

輸入用戶名和密碼，登錄成功。瀏覽器又會返回到cas-client1的首頁，如下圖：

直接打開client2或者跳轉到client2，均顯示已登錄：

到此，單點登錄測試成功。下面將針對自己的業務對cas進行改造。

參考：http://dinguangx.iteye.com/blog/1845114

單點登錄(四)cas客戶端配置

Mysql 8小時問題

linux清swap

eclipse列編輯

System.exit(0)

單點登錄(一)cas概念+原理

Mac下配置sublime實現LaTeX

https://yachay.unat.edu.pe/blog/index.php?comment_area=format_blog&comment_component=blog&comment_co

linux以太網驅動總結