cas5.2.6单点登录-分布式部署 redis

超、凢脫俗 2024-02-19 19:58 20阅读 0赞

规则两条：

1.session共享 ：session的存取都从中央缓存redis中存取

2.票证共享 ：采用统一的ticket存取策略，所有ticket的操作都从中央缓存redis中存取。

第一步：

参考文档

[https://apereo.github.io/cas/5.2.x/installation/Webflow-Customization-Sessions.html][https_apereo.github.io_cas_5.2.x_installation_Webflow-Customization-Sessions.html]

<dependency>
      <groupId>org.apereo.cas</groupId>
      <artifactId>cas-server-webapp-session-redis</artifactId>
      <version>${cas.version}</version>
    </dependency>

配置application.properties文件

##########################################################配置redis存储session##############################################################################
    #配置redis存储session
    cas.webflow.autoconfigure=true
    cas.webflow.alwaysPauseRedirect=false
    cas.webflow.refresh=true
    cas.webflow.redirectSameState=false
    
    cas.webflow.session.lockTimeout=30
    cas.webflow.session.compress=false
    cas.webflow.session.maxConversations=5
    cas.webflow.session.storage=true
    spring.session.store-type=redis
    spring.redis.host=127.0.0.1
    spring.redis.password=
    spring.redis.port=6379
    ##########################################################配置redis存储session##############################################################################

第二步：redis存储ticket

参考文档  
[https://apereo.github.io/cas/5.2.x/installation/Redis-Ticket-Registry.html][https_apereo.github.io_cas_5.2.x_installation_Redis-Ticket-Registry.html]

[https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties-Common.html\#redis-configuration][https_apereo.github.io_cas_5.3.x_installation_Configuration-Properties-Common.html_redis-configuration]

pom:

<dependency>
        <groupId>org.apereo.cas</groupId>
        <artifactId>cas-server-support-redis-ticket-registry</artifactId>
        <version>${cas.version}</version>
    </dependency>

配置application.properties文件

##################配置redis存储ticket########################################
    #配置redis存储ticket
    cas.ticket.registry.redis.host=127.0.0.1
    cas.ticket.registry.redis.database=0
    cas.ticket.registry.redis.port=6379
    cas.ticket.registry.redis.password=
    cas.ticket.registry.redis.timeout=2000
    cas.ticket.registry.redis.useSsl=false
    cas.ticket.registry.redis.usePool=true
    cas.ticket.registry.redis.pool.max-active=20
    cas.ticket.registry.redis.pool.maxIdle=8
    cas.ticket.registry.redis.pool.minIdle=0
    cas.ticket.registry.redis.pool.maxActive=8
    cas.ticket.registry.redis.pool.maxWait=-1
    cas.ticket.registry.redis.pool.numTestsPerEvictionRun=0
    cas.ticket.registry.redis.pool.softMinEvictableIdleTimeMillis=0
    cas.ticket.registry.redis.pool.minEvictableIdleTimeMillis=0
    cas.ticket.registry.redis.pool.lifo=true
    cas.ticket.registry.redis.pool.fairness=false
    cas.ticket.registry.redis.pool.testOnCreate=false
    cas.ticket.registry.redis.pool.testOnBorrow=false
    cas.ticket.registry.redis.pool.testOnReturn=false
    cas.ticket.registry.redis.pool.testWhileIdle=false
    #集群
    #cas.ticket.registry.redis.sentinel.master=mymaster
    #cas.ticket.registry.redis.sentinel.nodes[0]=localhost:26377
    #cas.ticket.registry.redis.sentinel.nodes[1]=localhost:26378
    #cas.ticket.registry.redis.sentinel.nodes[2]=localhost:26379
    ##################配置redis存储ticket########################################

第三步：key值的设置

# cas.tgc.path=
    # cas.tgc.maxAge=-1
    # cas.tgc.domain=
    # cas.tgc.name=TGC
    # cas.tgc.secure=true
    # cas.tgc.httpOnly=true
    # cas.tgc.rememberMeMaxAge=1209600
    # cas.tgc.crypto.encryption.key=
    # cas.tgc.crypto.signing.key=
    cas.tgc.crypto.enabled=false
    #################################票证授权#########################

注意：cas每次启动的时候回随机生成这两个key的值，这样集群部署的时候就会出现这两个值不一样。当然除了配置false以外，还有一种方式就是将这两个值给写死也行。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70][]

[https_apereo.github.io_cas_5.2.x_installation_Webflow-Customization-Sessions.html]: https://apereo.github.io/cas/5.3.x/installation/Webflow-Customization-Sessions.html
[https_apereo.github.io_cas_5.2.x_installation_Redis-Ticket-Registry.html]: https://apereo.github.io/cas/5.2.x/installation/Redis-Ticket-Registry.html
[https_apereo.github.io_cas_5.3.x_installation_Configuration-Properties-Common.html_redis-configuration]: https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties-Common.html#redis-configuration
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/214f34ba117949a2a2d0f0bd0ba907d0.png