cas统一认证-集成客户端案例

原创已于 2025-06-11 17:20:53 修改 · 894 阅读

1 ·

CC 4.0 BY-SA版权

文章标签：

#数据库

于 2020-05-08 13:39:14 首次发布

本文详细介绍了如何在项目中集成CAS统一认证系统，包括添加Maven依赖、配置application.yml、启用CASClient支持、添加CAS过滤器及自定义登录后处理逻辑。

cas统一认证-集成客户端案例

整合过程

1.pom添加依赖


<dependency>
    <groupId>net.unicon.cas</groupId>
    <artifactId>cas-client-autoconfig-support</artifactId>
    <version>2.1.0-GA</version>
    <exclusions>
        <exclusion>
            <groupId>org.jasig.cas.client</groupId>
            <artifactId>cas-client-core</artifactId>
        </exclusion>
    </exclusions>
</dependency>
<dependency>
    <groupId>org.jasig.cas.client</groupId>
    <artifactId>cas-client-core</artifactId>
    <version>3.5.0</version>
</dependency>

2.application.yml添加配置

#cas配置
cas:
  server-url-prefix: https://wedev.chinasoftinc.com/cas
  server-login-url: https://wedev.chinasoftinc.com/cas/login
  client-host-url: http://***客户端地址:端口号
  validation-type: CAS3

#cas.validation-type目前支持3中方式：1、CAS；2、CAS3；3、SAML 可以自己看一下源码,都是之前使用过的类。

3.开启CAS Client支持

@SpringBootApplication

//@PropertySource(value={"classpath:config/path.properties"},ignoreResourceNotFound=true,encoding="utf-8")

//@ImportResource("classpath:spring/*.xml")

//@EnableAspectJAutoProxy(proxyTargetClass = true,exposeProxy = true)

@EnableCasClient//开启cas

public class Application {

public static void main(String[] args) {

SpringApplication.run(Application.class, args);

}

4.添加CAS过滤器

package cc.mrbird.common.interceptor;

import org.jasig.cas.client.authentication.AuthenticationFilter;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import java.util.HashMap;
import java.util.Map;

@Configuration
public class CASAutoConfig {
    @Value("${cas.server-url-prefix}")
    private String serverUrlPrefix;
    @Value("${cas.server-login-url}")
    private String serverLoginUrl;
    @Value("${cas.client-host-url}")
    private String clientHostUrl;

    /**
     * 授权过滤器
     * @return
     */
    @Bean
    public FilterRegistrationBean filterAuthenticationRegistration() {
        FilterRegistrationBean registration = new FilterRegistrationBean();
        registration.setFilter(new AuthenticationFilter());
        // 设定匹配的路径
        registration.addUrlPatterns("/caslogin");
        Map<String,String> initParameters = new HashMap<String, String>();
        initParameters.put("casServerLoginUrl", serverUrlPrefix);
        initParameters.put("serverName", clientHostUrl);
        //忽略的url，"|"分隔多个url
        //initParameters.put("ignorePattern", "/api/*");
        registration.setInitParameters(initParameters);
        // 设定加载的顺序
        registration.setOrder(1);
        return registration;
    }
}

5.自定义登录后的逻辑处理

package cc.mrbird.system.controller;

import cc.mrbird.system.domain.User;
import cc.mrbird.system.service.UserService;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.*;
import org.apache.shiro.subject.Subject;
import org.jasig.cas.client.authentication.AttributePrincipal;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.RequestMapping;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
* @author fzf
* @version 1.0
* @date 2020/4/24 14:27
*/
@Controller
public class CasController {
    @Autowired
    private UserService userService;

    @RequestMapping("/caslogin")
    public String caslogin(HttpServletRequest request, Model model, HttpServletResponse response) {
        try {

//从CAS获取登录的用户信息
AttributePrincipal principal = (AttributePrincipal) request.getUserPrincipal();
String loginName = principal.getName();

//自定义与本系统结合的登录策略，下面提供案例
            User user = userService.findByName(loginName);
            UsernamePasswordToken token = new UsernamePasswordToken(loginName, user.getPassword(), true);
            try {
                Subject subject = SecurityUtils.getSubject();
                if (subject != null)
                    subject.logout();
                SecurityUtils.getSubject().login(token);
                this.userService.updateLoginTime(loginName);

            } catch (UnknownAccountException | IncorrectCredentialsException | LockedAccountException e) {
                return "认证失败！";
            } catch (AuthenticationException e) {
                return "认证失败！";
            }
        } catch (Exception e) {

        }
        return "redirect:/index";

    }
}