SSO单点登录基于CAS架构封装 Memcached 实例

最新推荐文章于 2022-04-22 23:23:02 发布
最新推荐文章于 2022-04-22 23:23:02 发布
阅读量188 收藏
点赞数
文章标签： memcached java python
原文链接：https://my.oschina.net/freelife/blog/706288
版权

2019独角兽企业重金招聘Python工程师标准>>> hot3.png

SSO认证中心是CAS整个应用架构的一个极其重要的关键点，必须满足如下两点要求： 1.高可用，不允许程序发生故障。如果认证中心发生故障，整个应用群将无法登录，导致所有服务瘫痪。 2.高并发，因为所有用户的登录请求都需要经过它处理，其承担的处理量往往是相当巨大的。

其中memcached的CAS源码 MemCacheTicketRegistry.java 类如下： /*

  • Licensed to Jasig under one or more contributor license
  • agreements. See the NOTICE file distributed with this work
  • for additional information regarding copyright ownership.
  • Jasig licenses this file to you under the Apache License,
  • Version 2.0 (the "License"); you may not use this file
  • except in compliance with the License. You may obtain a
  • copy of the License at the following location:
  • http://www.apache.org/licenses/LICENSE-2.0
  • Unless required by applicable law or agreed to in writing,
  • software distributed under the License is distributed on an
  • "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  • KIND, either express or implied. See the License for the
  • specific language governing permissions and limitations
  • under the License. / package org.jasig.cas.ticket.registry; import java.io.IOException; import java.net.InetSocketAddress; import java.util.Arrays; import java.util.Collection; import java.util.List; import javax.validation.constraints.Min; import javax.validation.constraints.NotNull; import net.spy.memcached.AddrUtil; import net.spy.memcached.MemcachedClient; import net.spy.memcached.MemcachedClientIF; import org.jasig.cas.ticket.ServiceTicket; import org.jasig.cas.ticket.Ticket; import org.jasig.cas.ticket.TicketGrantingTicket; import org.springframework.beans.factory.DisposableBean; /*
  • Key-value ticket registry implementation that stores tickets in memcached keyed on the ticket ID.
  • @author Scott Battaglia
  • @author Marvin S. Addison
  • @since 3.3 / public final class MemCacheTicketRegistry extends AbstractDistributedTicketRegistry implements DisposableBean { /* Memcached client. / @NotNull private final MemcachedClientIF client; /*
    • TGT cache entry timeout in seconds. / @Min(0) private final int tgtTimeout; /*
    • ST cache entry timeout in seconds. / @Min(0) private final int stTimeout; /*
    • Creates a new instance that stores tickets in the given memcached hosts.
    • @param hostnames Array of memcached hosts where each element is of the form host:port.
    • @param ticketGrantingTicketTimeOut TGT timeout in seconds.
    • @param serviceTicketTimeOut ST timeout in seconds. / public MemCacheTicketRegistry(final String[] hostnames, final int ticketGrantingTicketTimeOut, final int serviceTicketTimeOut) { try { this.client = new MemcachedClient(AddrUtil.getAddresses(Arrays.asList(hostnames))); } catch (final IOException e) { throw new IllegalArgumentException("Invalid memcached host specification.", e); } this.tgtTimeout = ticketGrantingTicketTimeOut; this.stTimeout = serviceTicketTimeOut; } /*
    • This alternative constructor takes time in milliseconds.
    • It has the timeout parameters in order to create a unique method signature.
    • @param ticketGrantingTicketTimeOut TGT timeout in milliseconds.
    • @param serviceTicketTimeOut ST timeout in milliseconds.
    • @param hostnames Array of memcached hosts where each element is of the form host:port.
    • @see MemCacheTicketRegistry#MemCacheTicketRegistry(String[], int, int)
    • @deprecated This has been deprecated / @Deprecated public MemCacheTicketRegistry(final long ticketGrantingTicketTimeOut, final long serviceTicketTimeOut, final String[] hostnames) { this(hostnames, (int) (ticketGrantingTicketTimeOut / 1000), (int) (serviceTicketTimeOut / 1000)); } /*
    • Creates a new instance using the given memcached client instance, which is presumably configured via
    • <code>net.spy.memcached.spring.MemcachedClientFactoryBean</code>.
    • @param client Memcached client.
    • @param ticketGrantingTicketTimeOut TGT timeout in seconds.
    • @param serviceTicketTimeOut ST timeout in seconds. / public MemCacheTicketRegistry(final MemcachedClientIF client, final int ticketGrantingTicketTimeOut, final int serviceTicketTimeOut) { this.tgtTimeout = ticketGrantingTicketTimeOut; this.stTimeout = serviceTicketTimeOut; this.client = client; } public String getHostnames() { return hostnames; } public void setHostnames(String hostnames) { this.hostnames = hostnames; } public int getTgtTimeout() { return tgtTimeout; } public int getStTimeout() { return stTimeout; } protected void updateTicket(final Ticket ticket) { logger.debug("Updating ticket {}", ticket); try { if (!this.client.replace(ticket.getId(), getTimeout(ticket), ticket).get()) { logger.error("Failed updating {}", ticket); } } catch (final InterruptedException e) { logger.warn("Interrupted while waiting for response to async replace operation for ticket {}. " + "Cannot determine whether update was successful.", ticket); } catch (final Exception e) { logger.error("Failed updating {}", ticket, e); } } public void addTicket(final Ticket ticket) { logger.debug("Adding ticket {}", ticket); try { if (!this.client.add(ticket.getId(), getTimeout(ticket), ticket).get()) { logger.error("Failed adding {}", ticket); } } catch (final InterruptedException e) { logger.warn("Interrupted while waiting for response to async add operation for ticket {}." + "Cannot determine whether add was successful.", ticket); } catch (final Exception e) { logger.error("Failed adding {}", ticket, e); } } public boolean deleteTicket(final String ticketId) { logger.debug("Deleting ticket {}", ticketId); try { return this.client.delete(ticketId).get(); } catch (final Exception e) { logger.error("Failed deleting {}", ticketId, e); } return false; } public Ticket getTicket(final String ticketId) { try { final Ticket t = (Ticket) this.client.get(ticketId); if (t != null) { return getProxiedTicketInstance(t); } } catch (final Exception e) { logger.error("Failed fetching {} ", ticketId, e); } return null; } /*
    • {@inheritDoc}
    • This operation is not supported.
    • @throws UnsupportedOperationException if you try and call this operation. / @Override public Collection<Ticket> getTickets() { throw new UnsupportedOperationException("GetTickets not supported."); } public void destroy() throws Exception { this.client.shutdown(); } /*
    • @param sync set to true, if updates to registry are to be synchronized
    • @deprecated As of version 3.5, this operation has no effect since async writes can cause registry consistency issues. */ @Deprecated public void setSynchronizeUpdatesToRegistry(final boolean sync) {} @Override protected boolean needsCallback() { return true; } private int getTimeout(final Ticket t) { if (t instanceof TicketGrantingTicket) { return this.tgtTimeout; } else if (t instanceof ServiceTicket) { return this.stTimeout; } throw new IllegalArgumentException("Invalid ticket type"); } }

将其 MemCacheTicketRegistry.java 类改为如下代码： /*

  • Licensed to Jasig under one or more contributor license

  • agreements. See the NOTICE file distributed with this work

  • for additional information regarding copyright ownership.

  • Jasig licenses this file to you under the Apache License,

  • Version 2.0 (the "License"); you may not use this file

  • except in compliance with the License. You may obtain a

  • copy of the License at the following location:

  • http://www.apache.org/licenses/LICENSE-2.0

  • Unless required by applicable law or agreed to in writing,

  • software distributed under the License is distributed on an

  • "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

  • KIND, either express or implied. See the License for the

  • specific language governing permissions and limitations

  • under the License. / package org.jasig.cas.ticket.registry; import java.io.IOException; import java.net.InetSocketAddress; import java.util.Arrays; import java.util.Collection; import java.util.List; import javax.validation.constraints.Min; import javax.validation.constraints.NotNull; import net.spy.memcached.AddrUtil; import net.spy.memcached.MemcachedClient; import net.spy.memcached.MemcachedClientIF; import org.jasig.cas.ticket.ServiceTicket; import org.jasig.cas.ticket.Ticket; import org.jasig.cas.ticket.TicketGrantingTicket; import org.springframework.beans.factory.DisposableBean; /*

  • Key-value ticket registry implementation that stores tickets in memcached keyed on the ticket ID.

  • @author Scott Battaglia

  • @author Marvin S. Addison

  • @since 3.3 / public final class MemCacheTicketRegistry extends AbstractDistributedTicketRegistry implements DisposableBean { /* Memcached client. / @NotNull private final MemcachedClientIF client = getClient(); /*

    • TGT cache entry timeout in seconds. / @Min(0) private int tgtTimeout; /*
    • ST cache entry timeout in seconds. */ @Min(0) private int stTimeout;

    private String hostname;

    public MemcachedClient getClient(){ try { return new MemcachedClient(AddrUtil.getAddresses(Arrays.asList(hostname))); } catch (IOException e) { // TODO Auto-generated catch block e.printStackTrace(); } return null; } protected void updateTicket(final Ticket ticket) { logger.debug("Updating ticket {}", ticket); try { if (!this.client.replace(ticket.getId(), getTimeout(ticket), ticket).get()) { logger.error("Failed updating {}", ticket); } } catch (final InterruptedException e) { logger.warn("Interrupted while waiting for response to async replace operation for ticket {}. " + "Cannot determine whether update was successful.", ticket); } catch (final Exception e) { logger.error("Failed updating {}", ticket, e); } } public void addTicket(final Ticket ticket) { logger.debug("Adding ticket {}", ticket); try { if (!this.client.add(ticket.getId(), getTimeout(ticket), ticket).get()) { logger.error("Failed adding {}", ticket); } } catch (final InterruptedException e) { logger.warn("Interrupted while waiting for response to async add operation for ticket {}." + "Cannot determine whether add was successful.", ticket); } catch (final Exception e) { logger.error("Failed adding {}", ticket, e); } } public boolean deleteTicket(final String ticketId) { logger.debug("Deleting ticket {}", ticketId); try { return this.client.delete(ticketId).get(); } catch (final Exception e) { logger.error("Failed deleting {}", ticketId, e); } return false; } public Ticket getTicket(final String ticketId) { try { final Ticket t = (Ticket) this.client.get(ticketId); if (t != null) { return getProxiedTicketInstance(t); } } catch (final Exception e) { logger.error("Failed fetching {} ", ticketId, e); } return null; } /**

    • {@inheritDoc}
    • This operation is not supported.
    • @throws UnsupportedOperationException if you try and call this operation. / @Override public Collection<Ticket> getTickets() { throw new UnsupportedOperationException("GetTickets not supported."); } public void destroy() throws Exception { this.client.shutdown(); } /*
    • @param sync set to true, if updates to registry are to be synchronized
    • @deprecated As of version 3.5, this operation has no effect since async writes can cause registry consistency issues. */ @Deprecated public void setSynchronizeUpdatesToRegistry(final boolean sync) {} @Override protected boolean needsCallback() { return true; } private int getTimeout(final Ticket t) { if (t instanceof TicketGrantingTicket) { return this.tgtTimeout; } else if (t instanceof ServiceTicket) { return this.stTimeout; } throw new IllegalArgumentException("Invalid ticket type"); } public int getTgtTimeout() { return tgtTimeout; } public void setTgtTimeout(int tgtTimeout) { this.tgtTimeout = tgtTimeout; } public int getStTimeout() { return stTimeout; } public void setStTimeout(int stTimeout) { this.stTimeout = stTimeout; } public String getHostname() { return hostname; } public void setHostname(String hostname) { this.hostname = hostname; }

} cas单点登录架构 ticket 票据存储方式为 memcached（单节点配置memcached满足cas存储票据），具体ticketRegistry.xml配置如下： 修改cas-server-webapp工程中ticketRegistry.xml文件 内容不全，网站 素文宅 http://www.yoodb.com/article/display/1168

转载于:https://my.oschina.net/freelife/blog/706288

weixin_34049032
关注
SSOP28封装
07-10
SSOP28封装
05-单点登陆系统（SSO）设计及实现
雨田说码
07-22 9515
系统简介 Http通讯协议 web应用采用browser/server架构，http作为通信协议。http是无状态协议，浏览器的每一次请求，服务器会独立处理，不与之前或之后的请求产生关联，这个过程用下图说明，三次请求/响应对之间没有任何联系。 但这也同时意味着，任何用户都能通过浏览器访问服务器资源，如果想保护服务器的某些资源，必须限制浏览器请求；要限制浏览器请求，必须鉴别浏览器请求，响应合法请求，忽略非法请求；要鉴别浏览器请求，必须清楚浏览器请求状态。既然http协议无状态，那就让服务器和浏览器共同维护一
java memcache cas_SSO单点登录基于CAS架构封装 Memcached 实例
weixin_32773101的博客
02-24 93
@since 3.3 / public final class MemCacheTicketRegistry extends AbstractDistributedTicketRegistry implements DisposableBean { /* Memcached client. / @NotNull private final MemcachedClientIF client = ge...
三、SpringBoot集成CAS 单点登录，CAS Client。CAS 单点登录动态开关。
uziuzi669的博客
08-07 1万+
目录CAS 简介二级目录三级目录 CAS 简介 1、CAS 单点登录分为两个部分，第一个是认证中心 Cas Server，第二个是 Cas Server。 我们使用 SpringBoot 集成 Cas 只需要集成Client。 2、CAS API官方文档 3、cas 简介博客 二级目录 三级目录 ......
微服务单点登录实现
qq_61393507的博客
12-11 2770
概述： 单点登录，英文是 Single Sign On（缩写为 SSO）。即多个站点共用一台认证授权服务器，用户在其中任何一个站点登录后，可以免登录访问其他所有站点。而且，各站点间可以通过该登录状态直接交互。那为什么要用单点登录呢？为了在分布式系统中让用户再访问不同服务资源时，不需要进行多次登录，进而改善用户的体验。如何解决呢？ 解决方案：根据了解常用两种: spring security+jwt+oauth2,spring security+redis+oauth2，那...
Java进阶SSO单点登录技术CAS-快速上手与原理探究视频教程
06-09
本课程主要通过CAS来实现SSO，本教程会从最基本的基础知识讲起，由浅入深再到实战，完成多应用的单点登录功能。 本课程内容如下： 1、 什么是SSO和CAS 2、 CAS Server服务端和客户端的搭建和配置 3、 单点登录和单...
SSO单点登录架构图示例图大全.zip
最新发布
09-04
在“SSO单点登录架构图示例图大全”这个压缩包中，你可能会找到各种SSO架构的示意图，包括但不限于以下几种： 1. **单IDP多SP架构**：显示一个中央IDP服务于多个SP的场景。 2. **分布式IDP架构**：在大型组织中，...
Spring Security基于JWT实现SSO单点登录详解
08-25
Spring Security 基于 JWT 实现 SSO 单点登录详解 基于 Spring Security 框架和 JWT（JSON Web Token）技术，可以实现 SSO（Single Sign-On）单点登录系统。SSO 是一种常见的身份验证机制，允许用户使用同一个...
单点登录sso-shiro-cas-maven
10-19
spring下使用shiro+cas配置单点登录，多个系统之间的访问，每次只需要登录一次 ## 系统模块说明 1. cas： 单点登录模块，这里直接拿的是cas的项目改了点样式而已 2. doc： 文档目录，里面有数据库生成语句，采用的...
sso单点登录ppt.ppt
10-30
sso单点登录ppt.ppt
集群环境下memcache解决session共享
05-12
tomcat8的集群环境下memcache解决session共享的jar包。
SSO 轻量级实现指南（原生 Java 实现）：SSO Server 部分
zhangxin09的专栏
04-22 2472
OAuth 是当前单点登录（SSO）和用户授权的标准协议——现在就让我们一起动手撸一个 SSO 的实现吧！
【学习点滴-php】 SSO登录封装+json封装
专注、专心
11-21 2337
Json.php <?php /* vim: set expandtab tabstop=4 shiftwidth=4 softtabstop=4: */ /** * Converts to and from JSON format. * * JSON (JavaScript Object Notation) is a lightweight data-interchange * for
【转载】SOP SO SOIC TSSOP SSOP 封装直观比较图
zhangyu_study的博客
05-17 3万+
可以直观看出：SOP 、SO、 SOIC 三者 管脚大小和间距是一样的，只是整体外形大小不同TSSOP和SSOP管脚大小和间距相同，管脚间距明显比SOP系列的要小（密一些）原链接：http://blog.163.com/seven_ye_love@126/blog/static/420077072013112941353276/...
java实现完全跨域SSO单点登录
热门推荐
下雨了_简的博客
08-16 7万+
java实现SSO 什么是SSO SSO（Single Sign On）单点登录是实现多个系统之间统一登录的验证系统，简单来说就是：有A，B，C三个系统，在A处登录过后，再访问B系统，B系统就已经处于了登录状态，C系统也是一样。举个生活中栗子：你同时打开天猫和淘宝，都进入login界面，都要求你登录的，现在你在淘宝处登录后，直接在天猫处刷新，你会发现，你已经登录了，而且就是你在淘宝上登录的用户...
【算法】CAS的实现和无锁编程
weixin_45177279的博客
03-31 2113
CAS（Compare and swap，比较与交换） 是一种有名的无锁算法。比较与交换，先比较，发现与预期一致，说明没有其他线程改动过，于是再交换。如果与预期不一致说明改动过，就再来一次。 与各类锁相比，CAS算法会使得程序设计变得复杂，但是其拥有优越的性能优势，而且不会出现死锁（没有锁，不会有线程一直阻塞），使用CAS算法没有锁之间竞争带来的开销，也没有线程间频繁调度带来的开销大，拥有更优越的性能。 CAS属于乐观锁思想的实现方法，当多个线程试图使用CAS同时更新同一个数据时，只有一个线程能更新数据.
利用memcached实现CAS单点登录集群部署
weixin_33966365的博客
04-30 542
前言：利用memcached实现CAS单点登录集群部署 负载均衡：将接口请求的有状态性变成无状态性。是我们在实现负载均衡时必要要解决的问题。以应用接口的session状态为例，一般解决方法都是将session数据和应用进行剥离，session数据统一保存到同一个数据源中，数据源就是保存数据的地方，我们常使用的MySQL数据库就是一个数据源。通常为了性能更高，数据源一般采用内存数据库(memc...
基于memcached的CAS单点登录集群
任何技能都是从模仿开始，逐步升华。
03-07 7463
CAS的工作原理，主要是基于票据(Ticket)来实现的（参见 CAS基本原理）。CAS票据，存储在TicketRegistry中，因此要想实现CAS Cluster, 必须要多台CAS之间共享所有的Ticket，采用统一的TicketRegistry，可以达到此目的。  缺省的CAS实现中，TicketRegistry在内存中实现，不同的CAS服务器有自己单独的TicketRegistry，因此
基于CAS封装的无锁队列
小米的修行之路
12-25 307
队列：一端进，一端出 #pragma once #include <queue> #include <Windows.h> #include "CASLock.h" template <typename T> class zzcQueue { public: zzcQueue() {}; ~zzcQueue() {}; //压入一个元素到队尾 v...
Java SSO 实现：基于CAS的单点登录系统
"该资源提供了一个基于Java实现的单点登录系统SSO，利用CAS协议进行集成。包含了完整的代码和文档说明，旨在帮助开发者理解并构建自己的SSO解决方案。" 单点登录（Single Sign-On，简称SSO）是一种身份验证机制，...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值