cas 3.2 http 配置 带详细用户信息


CAS有些版本默认是 https,如果想用http则 配置想关的配置需要修改正确,或者 会导致用户登入不了


客户端配置 

<!-- Cas Start -->
  <filter>    
        <filter-name>CAS Single Sign Out Filter</filter-name>    
        <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>    
    </filter>    
    <filter-mapping>    
        <filter-name>CAS Single Sign Out Filter</filter-name>    
        <url-pattern>/*</url-pattern>    
    </filter-mapping>    
    <listener>    
        <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>    
    </listener>  
	
	<filter>    
        <filter-name>CAS Authentication Filter</filter-name>    
        <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>    
        <!-- CAS login 服务地址-->    
        <init-param>    
            <param-name>casServerLoginUrl</param-name>    
            <param-value>http://localhost:9080/cas/login</param-value>  
        </init-param>    
        <!-- 客户端应用服务地址-->    
        <init-param>    
            <param-name>serverName</param-name>    
            <param-value>http://localhost:8080</param-value>   
        </init-param>    
    </filter>    
    
    <!--负责Ticket校验 可选-->    
    <filter>    
        <filter-name>CAS Validation Filter</filter-name>    
        <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>    
        <init-param>    
            <param-name>casServerUrlPrefix</param-name>    
            <!-- 下面一定要是主机名称 -->    
            <param-value>http://localhost:9080/cas</param-value>  
        </init-param>    
        <init-param>    
            <param-name>serverName</param-name>    
            <param-value>http://localhost:8080</param-value>  
        </init-param>    
        <init-param>    
            <param-name>useSession</param-name>    
            <param-value>true</param-value>    
        </init-param>    
        <init-param>    
            <param-name>redirectAfterValidation</param-name>    
            <param-value>true</param-value>    
        </init-param>    
    </filter>    
    
    <filter>    
        <filter-name>CAS HttpServletRequest WrapperFilter</filter-name>    
        <filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>    
    </filter>    
    
    <filter-mapping>    
        <filter-name>CAS Authentication Filter</filter-name>    
        <url-pattern>/security/*</url-pattern>    
    </filter-mapping>    
    
    <filter-mapping>    
        <filter-name>CAS Validation Filter</filter-name>    
        <url-pattern>/security/*</url-pattern>    
    </filter-mapping>    
    
    <filter-mapping>    
        <filter-name>CAS HttpServletRequest WrapperFilter</filter-name>    
        <url-pattern>/security/*</url-pattern>    
    </filter-mapping>  
  <!-- Cas End -->

cas maven

		<dependency>
			<groupId>org.jasig.cas.client</groupId>
			<artifactId>cas-client-core</artifactId>
			<version>3.2.1</version>
		</dependency>



客服端用如下 写法可获取用户信息 用户信息


AttributePrincipal principal = (AttributePrincipal)request.getUserPrincipal();
Map attributes = principal.getAttributes();
String loginname = (String)attributes.get("loginname");



CAS 服务端配置 


(1):

deployerConfigContext.xml 修改   如下

<bean class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler" p:httpClient-ref="httpClient" p:requireSecure="true" />


修改为

<bean class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler" p:httpClient-ref="httpClient" p:requireSecure="false" />


(2): casServiceValidationSuccess.jsp 添加如下信息 


		<c:if test="${fn:length(assertion.chainedAuthentications[fn:length(assertion.chainedAuthentications)-1].principal.attributes) > 0}">
			<cas:attributes>
				<c:forEach var="attr" items="${assertion.chainedAuthentications[fn:length(assertion.chainedAuthentications)-1].principal.attributes}">
					<cas:attribute>
						<cas:${fn:escapeXml(attr.key)}>${fn:escapeXml(attr.value)}</cas:${fn:escapeXml(attr.key)}>
					</cas:attribute>
				</c:forEach>
			</cas:attributes>
		</c:if>


(3): warnCookieGenerator.xml 修改如下:


	<bean id="warnCookieGenerator" class="org.jasig.cas.web.support.CookieRetrievingCookieGenerator"
		p:cookieSecure="false"
		p:cookieMaxAge="-1"
		p:cookieName="CASPRIVACY"
		p:cookiePath="/cas" />
</beans>



(4):ticketGrantingTicketCookieGenerator.xml 修改如下:

	<bean id="ticketGrantingTicketCookieGenerator" class="org.jasig.cas.web.support.CookieRetrievingCookieGenerator"
		p:cookieSecure="false"
		p:cookieMaxAge="-1"
		p:cookieName="CASTGC"
		p:cookiePath="/cas" />
</beans>





  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值