CAS自定义登录验证

      上一篇文章介绍了CAS单点登录客户端获取服务端登录页面表单信息的配置，本篇文章简单介绍一下自定义登录验证的操作，基于上一篇文章http://blog.csdn.net/u011012826/article/details/50800577的基础上做的单点登录自定义验证方法，废话不多说，以下为具体的配置信息：

       cas单点登录的登录验证信息，配置在/src/main/webapp/WEB-INF/deployerConfigContext.xml中的authenticationHandlers配置，authenticationHandlers list主要是用来做认证用的。该list中所有的bean都需要实现AuthenticationHandler接口中的authenticate方法。用户提交认证请求之后，要满足该list中任意认证的条件才算是认证成功。每一个bean都可以配置自己的验证方式。所以，对于有多个认证方式的应用的时候，在这里自行组装认证条件就可以。具体的操作如下：

        1、创建自己的NbrcAuthenticationHandler.java类实现AuthenticationHandler，如下：其中的NbrcCredentials类在上一篇文章中有做介绍，这里不做多余的介绍。

import javax.sql.DataSource;

import org.jasig.cas.authentication.handler.AuthenticationException;
import org.jasig.cas.authentication.handler.AuthenticationHandler;
import org.jasig.cas.authentication.handler.NoOpPrincipalNameTransformer;
import org.jasig.cas.authentication.handler.PasswordEncoder;
import org.jasig.cas.authentication.handler.PlainTextPasswordEncoder;
import org.jasig.cas.authentication.handler.PrincipalNameTransformer;
import org.jasig.cas.authentication.principal.Credentials;
import org.springframework.dao.IncorrectResultSizeDataAccessException;
import org.springframework.jdbc.core.JdbcTemplate;
  
public class NbrcAuthenticationHandler implements AuthenticationHandler {  
    private static final Class<NbrcCredentials> DEFAULT_CLASS = NbrcCredentials.class;  
  
    private PasswordEncoder passwordEncoder = new PlainTextPasswordEncoder();  
    private JdbcTemplate jdbcTemplate;  
    private DataSource dataSource;  
  
    private PrincipalNameTransformer principalNameTransformer = new NoOpPrincipalNameTransformer();  
    private Class<?> classToSupport = DEFAULT_CLASS;  
    private boolean supportSubClasses = true;  
    @Override  
    public boolean authenticate(Credentials credentials) throws AuthenticationException {  
        final NbrcCredentials nc = (NbrcCredentials) credentials;  
        final String username = getPrincipalNameTransformer().transform(nc.getUsername());  
        final String password = nc.getPassword();  
            try {  
                String sql = "SELECT pwd FROM user WHERE user_name = ? ";  
                String dbPassword = getJdbcTemplate().queryForObject(  
                        sql  
                        , String.class, username); 
                return dbPassword.equals(password);  
            } catch (final IncorrectResultSizeDataAccessException e) {  
                // this means the username was not found.  
                return false;  
            }  
    }  
  
    @Override  
    public boolean supports(Credentials credentials) {  
        return credentials != null  
                && (this.classToSupport.equals(credentials.getClass()) || (this.classToSupport  
                .isAssignableFrom(credentials.getClass()))  
                && this.supportSubClasses);  
    }  
  
    public PasswordEncoder getPasswordEncoder() {  
        return passwordEncoder;  
    }  
  
    public void setPasswordEncoder(PasswordEncoder passwordEncoder) {  
        this.passwordEncoder = passwordEncoder;  
    }  
  
    public PrincipalNameTransformer getPrincipalNameTransformer() {  
        return principalNameTransformer;  
    }  
  
    public void setPrincipalNameTransformer(PrincipalNameTransformer principalNameTransformer) {  
        this.principalNameTransformer = principalNameTransformer;  
    }  
  
    public final void setDataSource(final DataSource dataSource) {  
        this.jdbcTemplate = new JdbcTemplate(dataSource);  
        this.dataSource = dataSource;  
    }  

    protected final JdbcTemplate getJdbcTemplate() {  
        return this.jdbcTemplate;  
    }  
  
    protected final DataSource getDataSource() {  
        return this.dataSource;  
    }  
}  

2、将原有系统自带的验证方法替换为自己定义的验证方法：/src/main/webapp/WEB-INF/deployerConfigContext.xml中的authenticationHandlers配置

修改前：

<property name="authenticationHandlers">
            <list>
                <bean
                    class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler"
                    p:httpClient-ref="httpClient" p:requireSecure="false" />
                <!-- 用户密码认证配置  -->
                <bean class="org.jasig.cas.adaptors.jdbc.QueryDatabaseAuthenticationHandler">
                    <property name="dataSource" ref="dataSource"></property>
                    <property name="sql" value="SELECT pwd FROM user WHERE user_name = ? "></property>
                   <!-- <property name="passwordEncoder" ref="MD5PasswordEncoder"></property> 用户密码加密认证，需要时开启-->
                </bean>
            </list>
        </property>

   

修改后： 

<property name="authenticationHandlers">
            <list>
                <bean
                    class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler"
                    p:httpClient-ref="httpClient" p:requireSecure="false" />
                <!-- 用户密码认证配置  -->
                 <bean class="com.casServer.NbrcAuthenticationHandler" >  
                        <property name="dataSource" ref="dataSource"></property>  
                </bean>  
            </list>
        </property>

这样，当登录提交的时候，就会进入到NbrcAuthenticationHandler中进行验证，从而实现自定义登录的功能，在NbrcAuthenticationHandler中可以自定义自己的验证方法。