cas统一认证-集成客户端案例

cas统一认证-集成客户端案例

整合过程

1.pom添加依赖

<!--cas的客户端 --> <dependency>     <groupId>net.unicon.cas</groupId>     <artifactId>cas-client-autoconfig-support</artifactId>     <version>2.1.0-GA</version>     <exclusions>         <exclusion>             <groupId>org.jasig.cas.client</groupId>             <artifactId>cas-client-core</artifactId>         </exclusion>     </exclusions> </dependency> <dependency>     <groupId>org.jasig.cas.client</groupId>     <artifactId>cas-client-core</artifactId>     <version>3.5.0</version> </dependency>

2.application.yml添加配置

#cas配置 cas:   server-url-prefix: https://wedev.chinasoftinc.com/cas   server-login-url: https://wedev.chinasoftinc.com/cas/login   client-host-url: http://***客户端地址:端口号   validation-type: CAS3 #cas.validation-type目前支持3中方式：1、CAS；2、CAS3；3、SAML 可以自己看一下源码,都是之前使用过的类。

3.开启CAS Client支持

@SpringBootApplication //@PropertySource(value={"classpath:config/path.properties"},ignoreResourceNotFound=true,encoding="utf-8") //@ImportResource("classpath:spring/*.xml") //@EnableAspectJAutoProxy(proxyTargetClass = true,exposeProxy = true) @EnableCasClient//开启cas public class Application {     public static void main(String[] args) {         SpringApplication.run(Application.class, args);     } }

4.添加CAS过滤器

package cc.mrbird.common.interceptor; import org.jasig.cas.client.authentication.AuthenticationFilter; import org.springframework.beans.factory.annotation.Value; import org.springframework.boot.web.servlet.FilterRegistrationBean; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import java.util.HashMap; import java.util.Map; @Configuration public class CASAutoConfig {     @Value("${cas.server-url-prefix}")     private String serverUrlPrefix;     @Value("${cas.server-login-url}")     private String serverLoginUrl;     @Value("${cas.client-host-url}")     private String clientHostUrl;     /**      * 授权过滤器      * @return      */     @Bean     public FilterRegistrationBean filterAuthenticationRegistration() {         FilterRegistrationBean registration = new FilterRegistrationBean();         registration.setFilter(new AuthenticationFilter());         // 设定匹配的路径         registration.addUrlPatterns("/caslogin");         Map<String,String> initParameters = new HashMap<String, String>();         initParameters.put("casServerLoginUrl", serverUrlPrefix);         initParameters.put("serverName", clientHostUrl);         //忽略的url，"|"分隔多个url         //initParameters.put("ignorePattern", "/api/*");         registration.setInitParameters(initParameters);         // 设定加载的顺序         registration.setOrder(1);         return registration;     } }

5.自定义登录后的逻辑处理

package cc.mrbird.system.controller; import cc.mrbird.system.domain.User; import cc.mrbird.system.service.UserService; import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.*; import org.apache.shiro.subject.Subject; import org.jasig.cas.client.authentication.AttributePrincipal; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.stereotype.Controller; import org.springframework.ui.Model; import org.springframework.web.bind.annotation.RequestMapping; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; /**  * @author fzf  * @version 1.0  * @date 2020/4/24 14:27  */ @Controller public class CasController {     @Autowired     private UserService userService;     @RequestMapping("/caslogin")     public String caslogin(HttpServletRequest request, Model model, HttpServletResponse response) {         try {             //从CAS获取登录的用户信息             AttributePrincipal principal = (AttributePrincipal) request.getUserPrincipal();             String loginName = principal.getName();            //自定义与本系统结合的登录策略，下面提供案例             User user = userService.findByName(loginName);               UsernamePasswordToken token = new UsernamePasswordToken(loginName, user.getPassword(), true);             try {                 Subject subject = SecurityUtils.getSubject();                 if (subject != null)                     subject.logout();                 SecurityUtils.getSubject().login(token);                 this.userService.updateLoginTime(loginName);             } catch (UnknownAccountException | IncorrectCredentialsException | LockedAccountException e) {                 return "认证失败！";             } catch (AuthenticationException e) {                 return "认证失败！";             }         } catch (Exception e) {         }         return "redirect:/index";     } }