多服务集成CAS实现单点登录

╰+哭是因爲堅強的太久メ 2022-02-14 04:29 387阅读 0赞

简要概述实现步骤（思路）：

1.创建web应用

2.集成CAS（使用CAS服务端内配置账户密码进行登录验证）

2.1导入jar包

2.2配置web.xml文件（拦截跳转验证以及验证结束返回）

3.配置CAS服务端使用数据库表进行登录验证（[CAS本地服务搭建][CAS]）

3.1修改CAS服务端配置文件

4.再创建多个web应用，实现真正的单点登录

4.1同理步骤1、2，登录其中一个应用，其他应用便不用再登录

--------------------

1.web应用

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTc1ODQwNw_size_16_color_FFFFFF_t_70][]

2.集成CAS（web.xml添加配置）

注意：CAS服务端deployerConfigContext.xml文件这里要加入"http",因为这里web应用采用的是http，不加的话会报没权限使用CAS验证服务。

<util:list id="registeredServicesList">
            <bean class="org.jasig.cas.services.RegexRegisteredService"
                  p:id="0" p:name="HTTP and IMAP" p:description="Allows HTTP(S) and IMAP(S) protocols"
                  p:serviceId="^(https?|imaps?|http?)://.*" p:evaluationOrder="10000001" />

导入jar包：

<dependency>
        <groupId>org.jasig.cas.client</groupId>
        <artifactId>cas-client-core</artifactId>
        <version>3.3.3</version>
      </dependency>
    
      <dependency>
        <groupId>org.jasig.cas</groupId>
        <artifactId>cas-server-core-authentication</artifactId>
        <version>4.2.7</version>
      </dependency>

配置web.xml文件：

<listener>
            <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
        </listener>
        
        <filter>
            <filter-name>CAS Single Sign Out Filter</filter-name>
            <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
        </filter>
        <filter-mapping>
            <filter-name>CAS Single Sign Out Filter</filter-name>
            <url-pattern>/*</url-pattern>
        </filter-mapping>
    
        
        
        <filter>
            <filter-name>CASFilter</filter-name>
            <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
            <init-param>
                <param-name>casServerLoginUrl</param-name>
                <param-value>https://www.sso.com:8443/cas/login</param-value>
                
            </init-param>
            <init-param>
                
                <param-name>serverName</param-name>
                <param-value>http://localhost:28081</param-value>
            </init-param>
    
            
            <init-param>
                <param-name>ignorePattern</param-name>
                <param-value>/js/*|/img/*|/view/*|/css/*|/page/list</param-value>
            </init-param>
    
        </filter>
        <filter-mapping>
            <filter-name>CASFilter</filter-name>
            <url-pattern>/*</url-pattern>
        </filter-mapping>
        
        <filter>
    
            <filter-name>CAS Validation Filter</filter-name>
            <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>
            <init-param>
                <param-name>casServerUrlPrefix</param-name>
                <param-value>https://www.sso.com:8443/cas</param-value>
                
            </init-param>
            <init-param>
                <param-name>serverName</param-name>
                <param-value>http://localhost:28081</param-value>
                
            </init-param>
        </filter>
        <filter-mapping>
            <filter-name>CAS Validation Filter</filter-name>
            <url-pattern>/*</url-pattern>
        </filter-mapping>
        
        <filter>
            <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
            <filter-class>
                org.jasig.cas.client.util.HttpServletRequestWrapperFilter
            </filter-class>
        </filter>
        <filter-mapping>
            <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
            <url-pattern>/*</url-pattern>
        </filter-mapping>
        
        <filter>
            <filter-name>CAS Assertion Thread Local Filter</filter-name>
            <filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filter-class>
        </filter>
        <filter-mapping>
            <filter-name>CAS Assertion Thread Local Filter</filter-name>
            <url-pattern>/*</url-pattern>
        </filter-mapping>

到此第二步完成，启动应用访问 http://localhost:28081 发现集成成功，访问主页需要登录，默认账户密码：casuser --- Mellon

3.配置CAS服务端使用数据库表进行登录验证

说明：

认证对比方式为:先根据username查询数据库，返回password（已加密存储），加密登录页面传进来的password，对比这两个password是否相等。

CAS服务端导入jar包：

cas-server-support-jdbc-4.2.7.jar、cas-server-support-rest-4.2.7.jar、mysql-connector-java-5.1.45.jar

配置deployerConfigContext.xml文件：

注释掉原有的认证bean：

![20190425203436526.png][]

<bean id="queryDatabaseAuthenticationHandler" name="primaryAuthenticationHandler" class="org.jasig.cas.adaptors.jdbc.QueryDatabaseAuthenticationHandler">
            <property name="passwordEncoder" ref="MD5PasswordEncoder"/>
            <property name="dataSource" ref="dataSource"/>
            <property name="sql" value="${cas.jdbc.authn.query.sql}"/>
        </bean>
    	
    	
        <bean id="MD5PasswordEncoder" class="org.jasig.cas.authentication.handler.DefaultPasswordEncoder" autowire="byName">
            <constructor-arg  value="MD5"/>
        </bean>
    
    	
        <alias name="dataSource" alias="queryDatabaseDataSource"/>
    
    	 
        <bean id="dataSource" 
                class="com.mchange.v2.c3p0.ComboPooledDataSource"
                p:driverClass="com.mysql.jdbc.Driver"
                p:jdbcUrl="jdbc:mysql://127.0.0.1:3306/demo?useUnicode=true&characterEncoding=UTF-8&zeroDateTimeBehavior=convertToNull"
                p:user="root"
                p:password="123456"
                p:initialPoolSize="6"
                p:minPoolSize="6"
                p:maxPoolSize="18"
                p:maxIdleTimeExcessConnections="120"
                p:checkoutTimeout="10000"
                p:acquireIncrement="6"
                p:acquireRetryAttempts="5"
                p:acquireRetryDelay="2000"
                p:idleConnectionTestPeriod="30"
                p:preferredTestQuery="select 1"/>

配置cas.properties文件，添加查询数据库sql语句：

# cas.jdbc.authn.query.sql=
    cas.jdbc.authn.query.sql=select password from user where username=?

到此，配置完成。

验证：数据库存入 test1 --- 594f803b380a41396ed63dca39503542 登录页面输入test1 --- aaaaa

注：笔记使用

[CAS]: https://mp.csdn.net/postedit/89464198
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTc1ODQwNw_size_16_color_FFFFFF_t_70]: /images/20220214/9ff805afa4174419b3cfff1043ff3fa7.png
[20190425203436526.png]: /images/20220214/01ba1f34144645239169fbce0682192c.png