修改CAS实现控制某个用户在定义的时间内登录次数

最新推荐文章于 2019-12-24 15:53:12 发布

圣诞老人123

最新推荐文章于 2019-12-24 15:53:12 发布

阅读量3.2k

点赞数

分类专栏： CAS WEB框架开发架构设计摸索文章标签： credentials transition string bean user exception

本文链接：https://blog.csdn.net/chenyongsuda/article/details/5386421

版权

CAS 同时被 3 个专栏收录

12 篇文章 0 订阅

订阅专栏

架构设计摸索

7 篇文章 0 订阅

订阅专栏

WEB框架开发

1 篇文章 0 订阅

订阅专栏

思想：

在数据库增加字段 1.登录次数 2.登录失败时间（类型TimeStamp）

当一个用户进来认证的时候当登录失败的时候更新登录次数和最后登录失败的时间。

主要是在登录成功或者失败的时候判断时间差是不是大于定义的时间，要数大于得话得更新登陆次数和失败时间。

成功的时候把登陆次数更新，而不更新登录错误时间

登录失败的时候把登陆次数更新为最大次数减一，把错误时间更新到当前。

具体在CAS中的实现

修改web-flow 验证路口：先修改配置文件cas-servlet.xml

把 <bean id="authenticationViaFormAction" class="org.jasig.cas.web.flow.AuthenticationViaFormAction" p:centralAuthenticationService-ref="centralAuthenticationService" p:warnCookieGenerator-ref="warnCookieGenerator"/> 改成： <bean id="authenticationViaFormAction" class="flow.AuthenticationViaFormAction" p:centralAuthenticationService-ref="centralAuthenticationService" p:dataSource-ref = "casDataSource"//数据源 p:warnCookieGenerator-ref="warnCookieGenerator"/>

定义flow.AuthenticationViaFormAction类原cas-server-core-3.3.3.jar中类

package flow; import java.io.IOException; import java.sql.Timestamp; import java.util.ArrayList; import java.util.List; import java.util.Map; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.sql.DataSource; import org.inspektr.common.ioc.annotation.NotNull; import org.jasig.cas.CentralAuthenticationService; import org.jasig.cas.authentication.handler.AuthenticationException; import org.jasig.cas.authentication.principal.Credentials; import org.jasig.cas.authentication.principal.Service; import org.jasig.cas.authentication.principal.UsernamePasswordCredentials; import org.jasig.cas.ticket.TicketException; import org.jasig.cas.validation.UsernamePasswordCredentialsValidator; import org.jasig.cas.web.bind.CredentialsBinder; import org.jasig.cas.web.support.WebUtils; import org.springframework.jdbc.core.simple.SimpleJdbcTemplate; import org.springframework.util.Assert; import org.springframework.util.StringUtils; import org.springframework.validation.DataBinder; import org.springframework.validation.Errors; import org.springframework.web.util.CookieGenerator; import org.springframework.webflow.action.FormAction; import org.springframework.webflow.execution.Event; import org.springframework.webflow.execution.RequestContext; public class AuthenticationViaFormAction extends FormAction { private CredentialsBinder credentialsBinder; private SimpleJdbcTemplate jdbcTemplate; private DataSource dataSource; private static int TYPE1 =1; private static int TYPE2 = 2; @NotNull private CentralAuthenticationService centralAuthenticationService; @NotNull private CookieGenerator warnCookieGenerator; protected final void doBind(RequestContext context, DataBinder binder) throws Exception { HttpServletRequest request = WebUtils.getHttpServletRequest(context); Credentials credentials = (Credentials)binder.getTarget(); if (this.credentialsBinder != null) { this.credentialsBinder.bind(request, credentials); } super.doBind(context, binder); } public Event referenceData(RequestContext context) throws Exception { context.getRequestScope().put("commandName", getFormObjectName()); return success(); } public final Event submit(RequestContext context) throws Exception { Credentials credentials = (Credentials)getFormObject(context); String ticketGrantingTicketId = WebUtils.getTicketGrantingTicketId(context); Service service = WebUtils.getService(context); if ((StringUtils.hasText(context.getRequestParameters().get("renew"))) && (ticketGrantingTicketId != null) && (service != null)); try { if(ticketGrantingTicketId!=null){ String serviceTicketId = this.centralAuthenticationService.grantServiceTicket(ticketGrantingTicketId, service, credentials); WebUtils.putServiceTicketInRequestScope(context, serviceTicketId); putWarnCookieIfRequestParameterPresent(context); return warn(); } else{ try { WebUtils.putTicketGrantingTicketInRequestScope(context, this.centralAuthenticationService.createTicketGrantingTicket(credentials)); putWarnCookieIfRequestParameterPresent(context); return success(); } catch (TicketException ex) { populateErrorsInstance(context, ex); } } } catch (TicketException e) { if ((e.getCause() != null) && (AuthenticationException.class.isAssignableFrom(e.getCause().getClass()))) { populateErrorsInstance(context, e); return error(); } this.centralAuthenticationService.destroyTicketGrantingTicket(ticketGrantingTicketId); if (this.logger.isDebugEnabled()) { this.logger.debug("Attempted to generate a ServiceTicket using renew=true with different credentials", e); } try { WebUtils.putTicketGrantingTicketInRequestScope(context, this.centralAuthenticationService.createTicketGrantingTicket(credentials)); putWarnCookieIfRequestParameterPresent(context); return success(); } catch (TicketException ex) { populateErrorsInstance(context, e); } } return error(); } // add the method of judge the reason of the error :name or password public final Event errorJudge(RequestContext context) throws Exception { List list = new ArrayList(); HttpServletResponse response = WebUtils.getHttpServletResponse(context); HttpServletRequest request = WebUtils.getHttpServletRequest(context); Credentials credentials = (Credentials)getFormObject(context); StringBuffer sql = new StringBuffer(); sql.append("select id,userName,password,enable,errorTime from user where userName = '"); sql.append(((UsernamePasswordCredentials)credentials).getUsername()); sql.append("'"); list = getJdbcTemplate().queryForList(sql.toString()); if(list.size()==0){ sendMessage(request,response, TYPE1, 0); }else{ Map map = (Map)list.get(0); User user = new User(); user.setId(new Integer(map.get("id").toString())); user.setPassword(map.get("password").toString()); user.setUserName(map.get("userName").toString()); user.setDateSpan((Timestamp)(map.get("errorTime"))); user.setCount(new Integer(map.get("enable").toString())); sendMessage(request,response, TYPE2, user.getCount()); } return success(); } public String sendMessage(HttpServletRequest request,HttpServletResponse response,int type,int count) throws IOException{ StringBuffer str = new StringBuffer(); str.append("{"); str.append("status : /"false/","); if(type==TYPE1){ str.append("errorMessage : /" your userName Error"); }else if(type==TYPE2){ if(count!=0){ str.append("errorMessage : /" your password Error"); str.append("please retry"); str.append("you left "); str.append(count); str.append("Times to login!"); }else{ str.append("errorMessage : /" your have try 5 time in 30 mins so please after 30mins"); } }else{ } str.append("/"}"); request.setAttribute("string", str); System.out.println(str.toString()); return str.toString(); // response.getWriter().write(str.toString()); } public DataSource getDataSource() { return dataSource; } public void setDataSource(DataSource dataSource) { this.jdbcTemplate = new SimpleJdbcTemplate(dataSource); this.dataSource = dataSource; } public SimpleJdbcTemplate getJdbcTemplate() { return jdbcTemplate; } public void setJdbcTemplate(SimpleJdbcTemplate jdbcTemplate) { this.jdbcTemplate = jdbcTemplate; } public CredentialsBinder getCredentialsBinder() { return credentialsBinder; } public CentralAuthenticationService getCentralAuthenticationService() { return centralAuthenticationService; } public CookieGenerator getWarnCookieGenerator() { return warnCookieGenerator; } private final Event warn() { return result("warn"); } private final void populateErrorsInstance(RequestContext context, TicketException e) { Errors errors; try { errors = getFormErrors(context); errors.reject(e.getCode(), e.getCode()); } catch (Exception fe) { this.logger.error(fe, fe); } } private void putWarnCookieIfRequestParameterPresent(RequestContext context) { HttpServletResponse response = WebUtils.getHttpServletResponse(context); if (StringUtils.hasText(context.getExternalContext().getRequestParameterMap().get("warn"))) { this.warnCookieGenerator.addCookie(response, "true"); } else this.warnCookieGenerator.removeCookie(response); } public final void setCentralAuthenticationService(CentralAuthenticationService centralAuthenticationService) { this.centralAuthenticationService = centralAuthenticationService; } public final void setCredentialsBinder(CredentialsBinder credentialsBinder) { this.credentialsBinder = credentialsBinder; } public final void setWarnCookieGenerator(CookieGenerator warnCookieGenerator) { this.warnCookieGenerator = warnCookieGenerator; } protected void initAction() { if (getFormObjectClass() == null) { setFormObjectClass(UsernamePasswordCredentials.class); setFormObjectName("credentials"); setValidator(new UsernamePasswordCredentialsValidator()); this.logger.info("FormObjectClass not set. Using default class of " + getFormObjectClass().getName() + " with formObjectName " + getFormObjectName() + " and validator " + getValidator().getClass().getName() + "."); } Assert.isTrue(Credentials.class.isAssignableFrom(getFormObjectClass()), "CommandClass must be of type Credentials."); if (this.credentialsBinder != null) Assert.isTrue(this.credentialsBinder.supports(getFormObjectClass()), "CredentialsBinder does not support supplied FormObjectClass: " + getClass().getName()); } }

然后修改真正验证的核心类QueryDatabaseAuthenticationHandler cas-server-support-jdbc-3.3.3.jar包

首先修改deployerConfigContext.xml

替换 <bean class="org.jasig.cas.adaptors.jdbc.QueryDatabaseAuthenticationHandler"> <property name="dataSource" ref="casDataSource" /> <property name="sql" value="select password from user where lower(userName) = lower(?)" /> 为 <bean class="flow.QueryDatabaseAuthenticationHandler"> <property name="dataSource" ref="casDataSource" /> <property name="sql" value="select id,userName,password,enable,errorTime from user where lower(userName) = lower(?)" /> </bean>

新建自定义类QueryDatabaseAuthenticationHandler

package flow; import java.sql.Date; import java.sql.Timestamp; import java.util.ArrayList; import java.util.List; import java.util.Map; import org.inspektr.common.ioc.annotation.NotNull; import org.jasig.cas.adaptors.jdbc.AbstractJdbcUsernamePasswordAuthenticationHandler; import org.jasig.cas.authentication.handler.AuthenticationException; import org.jasig.cas.authentication.principal.UsernamePasswordCredentials; import org.springframework.dao.IncorrectResultSizeDataAccessException; public final class QueryDatabaseAuthenticationHandler extends AbstractJdbcUsernamePasswordAuthenticationHandler { @NotNull private String sql; private static long MIN = 60000; private static int STATIC_COUNT = 5; private static int TYPE_1 = 1; private static int TYPE_2 = 2; protected final boolean authenticateUsernamePasswordInternal(UsernamePasswordCredentials credentials) throws AuthenticationException { String username = credentials.getUsername(); String password = credentials.getPassword(); String encryptedPassword = getPasswordEncoder().encode(password); String sql_temp = "select id,userName,password,enable,errorTime from user where userName = '"+username+"'"; Map map = queryDB(sql_temp); if(map==null) return false; User user = cabineUser(map); //new build start if(isTimeOverVaildate(user.getDateSpan())){ update(STATIC_COUNT, user.getId(), TYPE_2); User user_temp = cabineUser(queryDB(sql_temp)); return passwordVaildateLogic(user_temp,encryptedPassword); }else{ if(user.getCount()>0){ return passwordVaildateLogic(user,encryptedPassword); }else{ return false; } } //new build end } //common password vaildate logic public boolean passwordVaildateLogic(User user,String encryptedPassword){ if(passwordVaildate(user, encryptedPassword)){ return true; }else{ update(user.getCount()-1,user.getId(), TYPE_2); return false; } } //password vaildate action public boolean passwordVaildate(User user,String encryptedPassword){ return user.getPassword().equals(encryptedPassword); } //query the map in DB public Map queryDB(String sql){ List list = new ArrayList(); list = getJdbcTemplate().queryForList(sql); if(list.size()==0) return null; return (Map)list.get(0); } //cabine the user public User cabineUser(Map map){ User user = new User(); user.setId(new Integer(map.get("id").toString())); user.setPassword(map.get("password").toString()); user.setUserName(map.get("userName").toString()); user.setDateSpan((Timestamp)(map.get("errorTime"))); user.setCount(new Integer(map.get("enable").toString())); return user; } //update time(type1) or time and count(type2) @param count,type public void update(int count,int id,int type){ String sqlUpdate_type1 = "UPDATE user SET enable = ? WHERE id = ?"; String sqlUpdate_type2 = "UPDATE user SET enable = ?,errorTime=? WHERE id = ?"; if(type ==1){ Object param[] = new Object[] {count,id}; getJdbcTemplate().update(sqlUpdate_type1, param); }else if(type ==2){ Object param[] = new Object[] {count,new Timestamp(System.currentTimeMillis()),id}; getJdbcTemplate().update(sqlUpdate_type2, param); } } //is time over 30min @param Date public boolean isTimeOverVaildate(Timestamp date){ long time1 = System.currentTimeMillis(); long time2 = date.getTime(); if(System.currentTimeMillis()-date.getTime()>30*MIN) return true; return false; } public void setSql(String sql) { this.sql = sql; } public String getSql() { return sql; } }

最后修改 simple-loginflow.xml中的一个FLOW结果，这是我自己的自定义flow 其他的可以类似的改。

<action-state id="submit"> <action bean="authenticationViaFormAction" method="submit" /> <transition on="success" to="sendTicketGrantingTicket" /> <transition on="error" to="errorJudge" /> </action-state> <action-state id="errorJudge"> <action bean="authenticationViaFormAction" method="errorJudge"/> <transition on="success" to="statusErrorCallbackView6"/> </action-state>

statusErrorCallbackView6中的内容为

<% response.getWriter().write(request.getAttribute("string").toString()); %> 其中的getAttribute("string")是在AuthenticationViaFormAction的sendMessage（这个方法在errorJudge里面有调用）方法里设的这个sendmessage就是把json格式的的信息放到request中。当页面返回时候得到那个属性的值。

这就是全部配置

整个的simple-loginflow.xml代码如下

<?xml version="1.0" encoding="UTF-8"?> <flow xmlns="http://www.springframework.org/schema/webflow" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation=" http://www.springframework.org/schema/webflow http://www.springframework.org/schema/webflow/spring-webflow-1.0.xsd"> <start-state idref="simpleLogin"/> <action-state id="simpleLogin"> <action bean="simpleLoginAction"/> <transition on="success" to="bindAndValidate"></transition> </action-state>  <decision-state id="ticketGrantingTicketExistsCheck"> <if test="${flowScope.ticketGrantingTicketId != null}" then="hasServiceCheck" else="bindAndValidate" /> </decision-state>  <decision-state id="hasServiceCheck"> <if test="${flowScope.service != null}" then="casLoginView" else="viewGenericLoginSuccess" /> </decision-state>  <action-state id="bindAndValidate"> <action bean="authenticationViaFormAction" /> <transition on="success" to="submit" /> <transition on="error" to="statusErrorCallbackView" /> </action-state> <action-state id="submit"> <action bean="authenticationViaFormAction" method="submit" /> <transition on="success" to="sendTicketGrantingTicket" /> <transition on="error" to="errorJudge" /> </action-state> <action-state id="errorJudge"> <action bean="authenticationViaFormAction" method="errorJudge"/> <transition on="success" to="statusErrorCallbackView6"/> </action-state> <action-state id="sendTicketGrantingTicket"> <action bean="sendTicketGrantingTicketAction" /> <transition on="success" to="generateServiceTicket" /> <transition on="error" to="statusErrorCallbackView" /> </action-state> <action-state id="generateServiceTicket"> <action bean="generateServiceTicketAction" /> <transition on="error" to="statusErrorCallbackView" /> <transition on="success" to ="statusSuccessCallbackView" /> </action-state>   <end-state id="redirect" view="bean:dynamicRedirectViewSelector" /> <end-state id="statusSuccessCallbackView" view="bean:dynamicRedirectViewSelector" />  <end-state id="statusErrorCallbackView" view="statusErrorCallbackView" /> <end-state id="statusErrorCallbackView1" view="statusErrorCallbackView1" /> <end-state id="statusErrorCallbackView2" view="statusErrorCallbackView2" /> <end-state id="statusErrorCallbackView3" view="statusErrorCallbackView3" /> <end-state id="statusErrorCallbackView4" view="statusErrorCallbackView4" /> <end-state id="statusErrorCallbackView5" view="statusErrorCallbackView5" /> <end-state id="statusErrorCallbackView6" view="statusErrorCallbackView6" /> </flow>

圣诞老人123

关注

0
点赞
踩
3

收藏

觉得还不错? 一键收藏
3
评论
修改CAS实现控制某个用户在定义的时间内登录次数

思想：在数据库增加字段 1.登录次数 2.登录失败时间（类型TimeStamp）当一个用户进来认证的时候当登录失败的时候更新登录次数和最后登录失败的时间。主要是在登录成功或者失败的时候判断时间差是不是大于定义的时间，要数大于得话得更新登陆次数和失败时间。成功的时候把登陆次数更新，而不更新登录错误时间登录失败的时候把登陆次数更新为最大次数减一，把错误时间更新到当前。
复制链接

扫一扫