CAS配置第三步：客户端的配置

最新推荐文章于 2024-04-20 22:10:07 发布

HNsnopy

最新推荐文章于 2024-04-20 22:10:07 发布

阅读量144

点赞数

分类专栏： Java 文章标签： JSP Tomcat Myeclipse 应用服务器 IE

Java 专栏收录该内容

12 篇文章 0 订阅

订阅专栏

[b]紧接上一篇：[url=http://andy-ghg.iteye.com/admin/blogs/942653]CAS配置第二步：服务器端的配置[/url]
[size=large]CAS Java 群35271653[/size][/b]
在MyEclipse中新建一个Java Web项目，加入cas-client-3.2.0.jar(下载地址见附件)
修改web.xml中的配置，加入CAS的过滤器（Filter）如下所示：


<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
	http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
	<!-- CAS 相关配置文件-->
	<!-- 单点登出,一定要在最前面  -->
	<filter>
		<filter-name>CAS Single Sign Out Filter</filter-name>
		<filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
	</filter>
	<filter-mapping>
		<filter-name>CAS Single Sign Out Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>
	<listener>
		<listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
	</listener>
	<!--单点登录 -->
	<filter>
		<filter-name>CAS Authentication Filter</filter-name>
		<filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
		<!-- CAS login 服务地址-->
		<init-param>
			<param-name>casServerLoginUrl</param-name>
			<param-value>https://andy:8443/cas/login</param-value>
		</init-param>
		<init-param>
			<param-name>renew</param-name>
			<param-value>false</param-value>
		</init-param>
		<init-param>
			<param-name>gateway</param-name>
			<param-value>false</param-value>
		</init-param>
		<!-- 客户端应用服务地址-->
		<init-param>
			<param-name>serverName</param-name>
			<param-value>https://andy:8333</param-value>
		</init-param>
	</filter>

	<!--负责Ticket校验-->
	<filter>
		<filter-name>CAS Validation Filter</filter-name>
		<filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>
		<init-param>
			<param-name>casServerUrlPrefix</param-name>
            <!-- 下面一定要是主机名称 -->
			<param-value>https://andy:8443/cas</param-value>
		</init-param>
		<init-param>
			<param-name>serverName</param-name>
			<param-value>https://andy:8333</param-value>
		</init-param>
		<init-param>
			<param-name>useSession</param-name>
			<param-value>true</param-value>
		</init-param>
		<init-param>
			<param-name>redirectAfterValidation</param-name>
			<param-value>true</param-value>
		</init-param>
	</filter>

	<filter>
		<filter-name>CAS HttpServletRequest WrapperFilter</filter-name>
		<filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>
	</filter>

	<filter>
		<filter-name>CAS Assertion Thread Local Filter</filter-name>
		<filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filter-class>
	</filter>

	<filter-mapping>
		<filter-name>CAS Authentication Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<filter-mapping>
		<filter-name>CAS Validation Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<filter-mapping>
		<filter-name>CAS HttpServletRequest WrapperFilter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<filter-mapping>
		<filter-name>CAS Assertion Thread Local Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>
	<!-- CAS 配置文件结束 -->
	<welcome-file-list>
		<welcome-file>index.jsp</welcome-file>
	</welcome-file-list>
</web-app>

然后编写index.jsp如下：


<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<%@page import="org.jasig.cas.client.validation.Assertion"%>
<%@page import="org.jasig.cas.client.util.AbstractCasFilter"%>
<%@page import="org.jasig.cas.client.authentication.AttributePrincipal"%>
<%
String path = request.getContextPath();
String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
%>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <base href="<%=basePath%>">

    <title>My JSP 'index.jsp' starting page</title>
	<meta http-equiv="pragma" content="no-cache">
	<meta http-equiv="cache-control" content="no-cache">
	<meta http-equiv="expires" content="0">    
	<meta http-equiv="keywords" content="keyword1,keyword2,keyword3">
	<meta http-equiv="description" content="This is my page">
	<!--
	<link rel="stylesheet" type="text/css" href="styles.css">
	-->
  </head>

  <body>
  	你已经登录进来了兄弟，下面是你的登录信息：
  	<%
  	AttributePrincipal principal = (AttributePrincipal) request.getUserPrincipal(); 

  	Map<String, Object> attributes = principal.getAttributes();
  	String userId = "";
  	String userClass = "";
  	if(attributes != null) {
  		userId = attributes.get("UserId").toString();
  		userClass = attributes.get("UserClass").toString();
  	}
  	%>
  	<p><%=userId %></p>
  	<p><%=userClass %></p>
  	<%
  		if(session != null){%>
  			<p><%=session.getId() %></p>		
  		<%}
  	%>

  	<a href="https://andy:8443/cas/logout">退出登录</a>
  </body>
</html>

将其部署到tomcat-cas-client中，并修改tomcat-cas-client的端口，需要修改多处。我这里修改成端口8333。

此时，同时启动tomcat-cas-server和tomcat-cas-client，如果端口不冲突的话，访问htps://andy:8333/WebProj/index.jsp时就会被过滤器拦截并定向到https://andy:8443/cas/login?service=https://andy:8333/WebProj/index.jsp
这个地址，后面的service在IE中可能会用%代替部分字符。
在此处输入你的数据库中的账号密码，如果验证通过就能进入到htps://andy:8333/WebProj/index.jsp了。
[size=medium][b]注意：[/b][/size]
在index.jsp中，我通过AttributePrincipal获取参数时，里面的UserId和UserClass是之前在Server端配置好的，可以查看上一篇关于此处的说明：
[url=http://andy-ghg.iteye.com/admin/blogs/942653]CAS配置第二步：服务器端的配置[/url]

HNsnopy

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
CAS配置第三步：客户端的配置

[b]紧接上一篇：[url=http://andy-ghg.iteye.com/admin/blogs/942653]CAS配置第二步：服务器端的配置[/url][size=large]CAS Java 群35271653[/size][/b]在MyEclipse中新建一个Java Web项目，加入cas-client-3.2.0.jar(下载地址见附件)修改web.xml中的配置，加...
复制链接

扫一扫