CAS 4.2.7 服务器的安装与client编写

cas 4.2.7 war 包下载：

https://download.csdn.net/download/pucao_cug/9802028

 

去掉https验证：

在cas.properties中修改：

tgc.secure=false

warn.cookie.secure=false

 

修改： cas.war\WEB-INF\classes\services\HTTPSandIMAPS-10000001.json

将"serviceId" : "^(https|imaps)://.*"     改为： "serviceId" : "^(https|imaps|http)://.*"  

 

将war包放入tomcat， 访问： http://localhost:8080/cas,   登陆用户：casuser， 密码：Mellon， 如果出现以下情况，则表明成功

 Log In Successful

 

 

client：

通过web.xml配置：

首先，pom.xml文件中加入：

<dependency>
  <groupId>org.jasig.cas.client</groupId>
  <artifactId>cas-client-core</artifactId>
  <version>3.5.0</version>
</dependency>

web.xml加入：

<!-- ****************** 单点登录开始 ********************-->

   <!-- 用于实现单点登出功能  可选 -->
   <listener>
       <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
   </listener>


   <!-- 该过滤器用于实现单点登出功能，单点退出配置，一定要放在其他filter之前 可选 --> 
   <filter>
       <filter-name>CAS Single Sign Out Filter</filter-name>
       <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
       <init-param>
           <param-name>casServerUrlPrefix</param-name>
           <param-value>http://localhost:8080/cas/</param-value>
       </init-param>
   </filter>
      
   <filter-mapping>
       <filter-name>CAS Single Sign Out Filter</filter-name>
       <url-pattern>/*</url-pattern>
   </filter-mapping>

   <!-- 该过滤器负责用户的认证工作，必须 -->
   <filter>
       <filter-name>CASFilter</filter-name>
       <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
       <init-param>
           <!--casServerLoginUrl:cas服务的登陆url -->
           <param-name>casServerLoginUrl</param-name>
           <param-value>http://localhost:8080/cas/login</param-value>
       </init-param>
       <init-param>
           <!--serverName:本项目的ip+port -->
           <param-name>serverName</param-name>
           <param-value>http://localhost:8081</param-value>
       </init-param>
       <init-param>
           <param-name>useSession</param-name>
           <param-value>true</param-value>
       </init-param>
       <init-param>
           <param-name>redirectAfterValidation</param-name>
           <param-value>true</param-value>
       </init-param>
   </filter>

   <filter-mapping>
       <filter-name>CASFilter
       </filter-name>
       <url-pattern>/*</url-pattern>
   </filter-mapping>

   <!-- 该过滤器负责对Ticket的校验工作，必须-->
   <filter>
       <filter-name>CAS Validation Filter</filter-name>
       <filter-class>
           org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter
       </filter-class>
       <init-param>
           <param-name>casServerUrlPrefix</param-name>
           <param-value>http://localhost:8080/cas/</param-value>
       </init-param>
       <init-param>
           <param-name>serverName</param-name>
           <param-value>http://localhost:8081</param-value>
       </init-param>
   </filter>
      
   <filter-mapping>
       <filter-name>CAS Validation Filter</filter-name>
       <!-- 对项目中的哪些路径做登录拦截-->
       <url-pattern>/*</url-pattern>
   </filter-mapping>

   <!-- 该过滤器对HttpServletRequest请求包装， 可通过HttpServletRequest的getRemoteUser()方法获得登录用户的登录名，可选 -->
   <filter>
       <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
       <filter-class>
           org.jasig.cas.client.util.HttpServletRequestWrapperFilter
       </filter-class>
   </filter>
      
   <filter-mapping>
       <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
       <url-pattern>/*</url-pattern>
   </filter-mapping>

   <!-- 该过滤器使得可以通过org.jasig.cas.client.util.AssertionHolder来获取用户的登录名。
   比如AssertionHolder.getAssertion().getPrincipal().getName()。 
   这个类把Assertion信息放在ThreadLocal变量中，这样应用程序不在web层也能够获取到当前登录信息 -->
   <filter>
       <filter-name>CAS Assertion Thread Local Filter</filter-name>
       <filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filter-class>
   </filter>
      
   <filter-mapping>
       <filter-name>CAS Assertion Thread Local Filter</filter-name>
       <url-pattern>/*</url-pattern>
   </filter-mapping>
   <!-- ****************** 单点登录结束 ********************-->

    

  访问localhost:8081/index.jsp, 会跳转到cas登陆界面， 登陆后可以跳转到index.jsp

 

 

通过spring boot配置：

pom.xml:

<dependency>
    <groupId>net.unicon.cas</groupId>
    <artifactId>cas-client-autoconfig-support</artifactId>
    <version>1.5.0-GA</version>
</dependency>

application.properties:

cas.server-url-prefix=http://localhost:8080/cas
cas.server-login-url=http://localhost:8080/cas/login
cas.client-host-url=http://localhost:8081
cas.validation-type=CAS

 在

@SpringBootApplication前面加入 @EnableCasClient

便可以实现拦截

 

 

实现参考：

https://blog.csdn.net/zzq900503/article/details/54693267

https://blog.csdn.net/zzq900503/article/details/54910609