CAS 单点退出核心源码

最新推荐文章于 2021-02-16 23:13:01 发布

weixin_34405354

最新推荐文章于 2021-02-16 23:13:01 发布

阅读量174

点赞数

文章标签： python

原文链接：https://my.oschina.net/u/1185936/blog/994824

版权

2019独角兽企业重金招聘Python工程师标准>>>

单点登出流程图

源码

(注：version 4.1.0)

cas server

<接口>LogoutManager
    List<LogoutRequest> performLogout(TicketGrantingTicket ticket);


<实现>LogoutManagerImpl
    private boolean performBackChannelLogout(final LogoutRequest request) {
        try {
            final String logoutRequest = this.logoutMessageBuilder.create(request);
            final SingleLogoutService logoutService = request.getService();
            logoutService.setLoggedOutAlready(true);
    
            LOGGER.debug("Sending logout request for: [{}]", logoutService.getId());
            final LogoutHttpMessage msg = new LogoutHttpMessage(request.getLogoutUrl(), logoutRequest);
            LOGGER.debug("Prepared logout message to send is [{}]", msg);
            return this.httpClient.sendMessageToEndPoint(msg);
        } catch (final Exception e) {
            LOGGER.error(e.getMessage(), e);
        }
        return false;
    }

cas client

拦截器：SingleSignOutFilter

public void doFilter(final ServletRequest servletRequest, final ServletResponse servletResponse, final FilterChain filterChain) throws IOException, ServletException {
        final HttpServletRequest request = (HttpServletRequest) servletRequest;

        if (handler.isTokenRequest(request)) {
            handler.recordSession(request);
        } else if (handler.isLogoutRequest(request)) {
            handler.destroySession(request);
            // Do not continue up filter chain
            return;
        } else {
            log.trace("Ignoring URI " + request.getRequestURI());
        }

        filterChain.doFilter(servletRequest, servletResponse);
    }

转载于:https://my.oschina.net/u/1185936/blog/994824