CAS4.10单点登录实战:客户端集成部署（SpringBoot）

待我称王封你为后i 2023-06-27 03:47 15阅读 0赞

## 目的 ##

部署CAS客户端，集成CAS Server端

上小节我们已经部署了CAS Server端，本小节我们部署两个CAS Client

模拟访问其中一个客户端是否能跳转到CAS Server端，当登录一个Client之后，再访问另一个是否免登录

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x_size_16_color_FFFFFF_t_70][]

# 集成步骤  #

1.构建SpringBoot项目（过程省略，版本采用2.0.6.RELEASE）

2.pom文件引入相关jar

<dependency>
    			<groupId>net.unicon.cas</groupId>
    			<artifactId>cas-client-autoconfig-support</artifactId>
    			<version>2.2.0-GA</version>
    			<exclusions>
    				<exclusion>
    					<groupId>org.jasig.cas.client</groupId>
    					<artifactId>cas-client-core</artifactId>
    				</exclusion>
    			</exclusions>
    		</dependency>
    
    		<dependency>
    			<groupId>org.jasig.cas.client</groupId>
    			<artifactId>cas-client-core</artifactId>
    			<version>3.5.0</version>
    		</dependency>

3.application.properties 配置文件配置过滤信息等

>     server.port=8082
>     
>     #cas 前缀
>     cas.server-url-prefix=http://localhost:8080/cas
>     #cas cas登录
>     cas.server-login-url=http://localhost:8080/cas/login
>     #回调地址
>     cas.client-host-url=http://localhost:8081/inner
>     #Ticket校验器使用Cas30ProxyReceivingTicketValidationFilter
>     cas.validation-type=CAS3
>     #cas不拦截的url
>     ignore-host-url=/hello/*

4.增加Java配置类

@Configuration
    public class CASAutoConfig {
        @Value("${cas.server-url-prefix}")
        private String serverUrlPrefix;
        @Value("${cas.server-login-url}")
        private String serverLoginUrl;
        @Value("${cas.client-host-url}")
        private String clientHostUrl;
        @Value("${ignore-host-url}")
        private String ignoreHostUrl;
    
        /**
         * 授权过滤器
         * @return
         */
        @Bean
        public FilterRegistrationBean filterAuthenticationRegistration() {
            FilterRegistrationBean registration = new FilterRegistrationBean();
            registration.setFilter(new AuthenticationFilter());
            // 设定匹配的路径
            registration.addUrlPatterns("/*");
            Map<String,String> initParameters = new HashMap<>();
            initParameters.put("casServerLoginUrl", serverUrlPrefix);
            initParameters.put("serverName", clientHostUrl);
            //忽略的url，"|"分隔多个url
            initParameters.put("ignorePattern", ignoreHostUrl);
            registration.setInitParameters(initParameters);
            // 设定加载的顺序
            registration.setOrder(1);
            return registration;
        }
    }

5.编写测试Controller类

@RestController
    public class HelloController {
    
        /**
         * 无权限
         * @return
         */
        @GetMapping(value = "hello")
        public String hello(){
            return  "hello-running";
        }
    
        /**
         * 需要权限
         * @return
         */
        @GetMapping(value = "inner")
        public String innner(){
            return  "inner-resource-running";
        }
    }

6.部署客户端，访问http://localhost:8082/init

会跳转到cas service端,如下图所示

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x_size_16_color_FFFFFF_t_70 1][]

显示错误信息：权限配置问题

Application Not Authorized to Use CAS
    The application you attempted to authenticate to is not authorized to use CAS.

问题修改：

修改Tomcat/webapps/cas/WEB-INF/classes/services目录下的.Json文件

> \{  
>     "@class": "org.jasig.cas.services.RegexRegisteredService",  
>     "serviceId": "^(https?)://localhost.\*",  
>     "name": "https://localhost",  
>     "id": 1,  
>     "evaluationOrder": 0,  
>     "logoutType": "BACK\_CHANNEL",  
>     "proxyPolicy" : \{  
>         "allowedToProxy": true,  
>         "@class" : "org.jasig.cas.services.RegexMatchingRegisteredServiceProxyPolicy",  
>         "pattern" : "^(https?)://localhost.\*"  
>     \}
> 
> \}
> 
> "serviceId","name","pattern"三项根据使用情况修改  
>

7.再次访问，正常跳转

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x_size_16_color_FFFFFF_t_70 2][]

8.分别访问两个客户端都可以访问（免登状态）

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x_size_16_color_FFFFFF_t_70 3][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/2020010300230179.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200103003416697.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200103003718643.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/2020010300520867.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p6aHVhbl8x,size_16,color_FFFFFF,t_70