CAS单点登录-自定义认证之重写Credential（十五）(1)

• @since

*/

public class UsernamePasswordSysCredential extends RememberMeUsernamePasswordCredential {

@Size(min = 2, message = “require system”)

private String system;

public String getSystem() {

return system;

}

public UsernamePasswordSysCredential setSystem(String system) {

this.system = system;

return this;

}

@Override

public int hashCode() {

return new HashCodeBuilder()

.appendSuper(super.hashCode())

.append(this.system)

.toHashCode();

}

}

绑定参数

前端重写绑定参数，并且重写指定原有的“

/*

• 版权所有.©2008-2017. 卡尔科技工作室

*/

package com.carl.sso.support.auth;

import org.apereo.cas.web.flow.AbstractCasWebflowConfigurer;

import org.apereo.cas.web.flow.CasWebflowConstants;

import org.springframework.webflow.definition.registry.FlowDefinitionRegistry;

import org.springframework.webflow.engine.Flow;

import org.springframework.webflow.engine.ViewState;

import org.springframework.webflow.engine.builder.BinderConfiguration;

import org.springframework.webflow.engine.builder.support.FlowBuilderServices;

/**

• 重新定义默认的web流程

• @author Carl

• @date 2017/10/23

• @since 1.6.0

*/

public class CustomWebflowConfigurer extends AbstractCasWebflowConfigurer {

public CustomWebflowConfigurer(FlowBuilderServices flowBuilderServices, FlowDefinitionRegistry flowDefinitionRegistry) {

super(flowBuilderServices, flowDefinitionRegistry);

}

@Override

protected void doInitialize() throws Exception {

final Flow flow = getLoginFlow();

bindCredential(flow);

}

/**

• 绑定输入信息

• @param flow

*/

protected void bindCredential(Flow flow) {

//重写绑定自定义credential

createFlowVariable(flow, CasWebflowConstants.VAR_ID_CREDENTIAL, UsernamePasswordSysCredential.class);

//登录页绑定新参数

final ViewState state = (ViewState) flow.getState(CasWebflowConstants.STATE_ID_VIEW_LOGIN_FORM);

final BinderConfiguration cfg = getViewStateBinderConfiguration(state);

//由于用户名以及密码已经绑定，所以只需对新加系统参数绑定即可

cfg.addBinding(new BinderConfiguration.Binding(“system”, null, false));

}

}

UsernamePasswordSystemAuthenticationHandler

当用户名为admin,并且system为sso即允许通过为了测试简单才定义简单的逻辑，开发过程中慎重考虑

/*

• 版权所有.©2008-2017. 卡尔科技工作室

*/

package com.carl.sso.support.auth.handler;

import com.carl.sso.support.auth.UsernamePasswordSysCredential;

import org.apereo.cas.authentication.Credential;

import org.apereo.cas.authentication.HandlerResult;

import org.apereo.cas.authentication.PreventedException;

import org.apereo.cas.authentication.handler.support.AbstractPreAndPostProcessingAuthenticationHandler;

import org.apereo.cas.authentication.principal.PrincipalFactory;

import org.apereo.cas.services.ServicesManager;

import javax.security.auth.login.AccountNotFoundException;

import java.security.GeneralSecurityException;

import java.util.Collections;

/**

• 用户名系统认证，只要是admin用户加上sso系统就允许通过

• @author Carl

• @date 2017/10/23

• @since 1.6.0

*/

public class UsernamePasswordSystemAuthenticationHandler extends AbstractPreAndPostProcessingAuthenticationHandler {

public UsernamePasswordSystemAuthenticationHandler(String name, ServicesManager servicesManager, PrincipalFactory principalFactory, Integer order) {

super(name, servicesManager, principalFactory, order);

}

@Override

protected HandlerResult doAuthentication(Credential credential) throws GeneralSecurityException, PreventedException {

//当用户名为admin,并且system为sso即允许通过

UsernamePasswordSysCredential sysCredential = (UsernamePasswordSysCredential) credential;

if (“admin”.equals(sysCredential.getUsername()) && “sso”.equals(sysCredential.getSystem())) {

//这里可以自定义属性数据

return createHandlerResult(credential, this.principalFactory.createPrincipal(((UsernamePasswordSysCredential) credential).getUsername(), Collections.emptyMap()), null);

} else {

throw new AccountNotFoundException(“必须是admin用户才允许通过”);

}

}

@Override

public boolean supports(Credential credential) {

return credential instanceof UsernamePasswordSysCredential;

}

}

注册CasWebflowConfigurer

这里是spring boot的知识，需要对配置进行识别

由于需要对Credential进行重写定义，必须在该配置之前注册，否则自定义的无法重写

@AutoConfigureBefore(value = CasWebflowContextConfiguration.class)

/*

• 版权所有.©2008-2017. 卡尔科技工作室

*/

package com.carl.sso.support.auth.config;

import com.carl.sso.support.auth.CustomWebflowConfigurer;

import org.apereo.cas.config.CasWebflowContextConfiguration;

import org.apereo.cas.configuration.CasConfigurationProperties;

import org.apereo.cas.web.flow.CasWebflowConfigurer;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Qualifier;

import org.springframework.boot.autoconfigure.AutoConfigureBefore;

import org.springframework.boot.context.properties.EnableConfigurationProperties;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

import org.springframework.webflow.definition.registry.FlowDefinitionRegistry;

import org.springframework.webflow.engine.builder.support.FlowBuilderServices;

/**

• @author Carl

• @date 2017/10/23

• @since 1.6.0

*/

@Configuration(“customerAuthWebflowConfiguration”)

@EnableConfigurationProperties(CasConfigurationProperties.class)

@AutoConfigureBefore(value = CasWebflowContextConfiguration.class)

public class CustomerAuthWebflowConfiguration {

@Autowired

@Qualifier(“logoutFlowRegistry”)

private FlowDefinitionRegistry logoutFlowRegistry;

@Autowired

@Qualifier(“loginFlowRegistry”)

private FlowDefinitionRegistry loginFlowRegistry;

@Autowired

@Qualifier(“builder”)

private FlowBuilderServices builder;

@Bean

public CasWebflowConfigurer customWebflowConfigurer() {

final CustomWebflowConfigurer c = new CustomWebflowConfigurer(builder, loginFlowRegistry);

c.setLogoutFlowDefinitionRegistry(logoutFlowRegistry);

return c;

}

}

注册AuthenticationHandler

/*

• 版权所有.©2008-2017. 卡尔科技工作室

*/

package com.carl.sso.support.auth.config;

import com.carl.sso.support.auth.handler.UsernamePasswordSystemAuthenticationHandler;

import org.apereo.cas.authentication.AuthenticationEventExecutionPlan;

import org.apereo.cas.authentication.AuthenticationEventExecutionPlanConfigurer;

import org.apereo.cas.authentication.AuthenticationHandler;

import org.apereo.cas.authentication.principal.PrincipalFactory;

import org.apereo.cas.configuration.CasConfigurationProperties;

import org.apereo.cas.services.ServicesManager;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Qualifier;

import org.springframework.boot.context.properties.EnableConfigurationProperties;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

/**

• @author Carl

• @date 2017/10/23

• @since 1.6.0

*/

@Configuration(“customAuthenticationEventExecutionPlanConfiguration”)

@EnableConfigurationProperties(CasConfigurationProperties.class)

public class CustomAuthenticationEventExecutionPlanConfiguration implements AuthenticationEventExecutionPlanConfigurer {

@Autowired

@Qualifier(“servicesManager”)

private ServicesManager servicesManager;

@Autowired

@Qualifier(“jdbcPrincipalFactory”)

public PrincipalFactory jdbcPrincipalFactory;

/**

• 注册验证器

• @return

*/

@Bean

public AuthenticationHandler customAuthenticationHandler() {

//优先验证

return new UsernamePasswordSystemAuthenticationHandler(“customAuthenticationHandler”,

servicesManager, jdbcPrincipalFactory, 1);

}

//注册自定义认证器

@Override

public void configureAuthenticationExecutionPlan(final AuthenticationEventExecutionPlan plan) {

plan.registerAuthenticationHandler(customAuthenticationHandler());

}

}

spring.factories

org.springframework.boot.autoconfigure.EnableAutoConfiguration=com.carl.sso.support.auth.config.CustomerAuthWebflowConfiguration,com.carl.sso.support.auth.config.CustomAuthenticationEventExecutionPlanConfiguration

casLoginView.html

新加绑定系统信息

<input class=“required”

id=“username”

size=“25”

tabindex=“1”

type=“text”

th:disabled=“${guaEnabled}”

th:field=“*{username}”

th:accesskey=“#{screen.welcome.label.netid.accesskey}”

autocomplete=“off”/>

<input class=“required”

type=“password”

id=“password”

size=“25”

tabindex=“2”

th:accesskey=“#{screen.welcome.label.password.accesskey}”

th:field=“*{password}”

autocomplete=“off”/>

系统

<select class=“required”

id=“system”

tabindex=“2”

th:accesskey=“#{screen.welcome.label.password.accesskey}”

th:field=“*{system}”

autocomplete=“off”>

自我介绍一下，小编13年上海交大毕业，曾经在小公司待过，也去过华为、OPPO等大厂，18年进入阿里一直到现在。

深知大多数Java工程师，想要提升技能，往往是自己摸索成长或者是报班学习，但对于培训机构动则几千的学费，着实压力不小。自己不成体系的自学效果低效又漫长，而且极易碰到天花板技术停滞不前！

因此收集整理了一份《2024年Java开发全套学习资料》，初衷也很简单，就是希望能够帮助到想自学提升又不知道该从何学起的朋友，同时减轻大家的负担。

既有适合小白学习的零基础资料，也有适合3年以上经验的小伙伴深入学习提升的进阶课程，基本涵盖了95%以上Java开发知识点，真正体系化！

由于文件比较大，这里只是将部分目录截图出来，每个节点里面都包含大厂面经、学习笔记、源码讲义、实战项目、讲解视频，并且会持续更新！

如果你觉得这些内容对你有帮助，可以扫码获取！！（备注Java获取）

最后

《互联网大厂面试真题解析、进阶开发核心学习笔记、全套讲解视频、实战项目源码讲义》点击传送门即可获取！
年Java开发全套学习资料》，初衷也很简单，就是希望能够帮助到想自学提升又不知道该从何学起的朋友，同时减轻大家的负担。**[外链图片转存中…(img-6fOIQEln-1713310503291)]

[外链图片转存中…(img-Oai6BA5h-1713310503292)]

[外链图片转存中…(img-AlQTuSBq-1713310503292)]

既有适合小白学习的零基础资料，也有适合3年以上经验的小伙伴深入学习提升的进阶课程，基本涵盖了95%以上Java开发知识点，真正体系化！

由于文件比较大，这里只是将部分目录截图出来，每个节点里面都包含大厂面经、学习笔记、源码讲义、实战项目、讲解视频，并且会持续更新！

如果你觉得这些内容对你有帮助，可以扫码获取！！（备注Java获取）

最后

[外链图片转存中…(img-dqLDEzdR-1713310503292)]

《互联网大厂面试真题解析、进阶开发核心学习笔记、全套讲解视频、实战项目源码讲义》点击传送门即可获取！