CAS配置第三步：客户端的配置

andy_ghg

浏览: 290492 次
性别:
来自: 扬州

最近访客更多访客>>

qq849397558

ug02j4

kingtsing

男人50

博主相关

博客

微博

相册

留言

关于我

文章分类

社区版块

存档分类

博客分类：

Java

JSP Tomcat Myeclipse 应用服务器 IE

紧接上一篇：CAS配置第二步：服务器端的配置
CAS Java 群35271653
在MyEclipse中新建一个Java Web项目，加入cas-client-3.2.0.jar(下载地址见附件)
修改web.xml中的配置，加入CAS的过滤器（Filter）如下所示：

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
	http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
	<!-- CAS 相关配置文件-->
	<!-- 单点登出,一定要在最前面  -->
	<filter>
		<filter-name>CAS Single Sign Out Filter</filter-name>
		<filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
	</filter>
	<filter-mapping>
		<filter-name>CAS Single Sign Out Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>
	<listener>
		<listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
	</listener>
	<!--单点登录 -->
	<filter>
		<filter-name>CAS Authentication Filter</filter-name>
		<filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
		<!-- CAS login 服务地址-->
		<init-param>
			<param-name>casServerLoginUrl</param-name>
			<param-value>https://andy:8443/cas/login</param-value>
		</init-param>
		<init-param>
			<param-name>renew</param-name>
			<param-value>false</param-value>
		</init-param>
		<init-param>
			<param-name>gateway</param-name>
			<param-value>false</param-value>
		</init-param>
		<!-- 客户端应用服务地址-->
		<init-param>
			<param-name>serverName</param-name>
			<param-value>https://andy:8333</param-value>
		</init-param>
	</filter>

	<!--负责Ticket校验-->
	<filter>
		<filter-name>CAS Validation Filter</filter-name>
		<filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>
		<init-param>
			<param-name>casServerUrlPrefix</param-name>
            <!-- 下面一定要是主机名称 -->
			<param-value>https://andy:8443/cas</param-value>
		</init-param>
		<init-param>
			<param-name>serverName</param-name>
			<param-value>https://andy:8333</param-value>
		</init-param>
		<init-param>
			<param-name>useSession</param-name>
			<param-value>true</param-value>
		</init-param>
		<init-param>
			<param-name>redirectAfterValidation</param-name>
			<param-value>true</param-value>
		</init-param>
	</filter>

	<filter>
		<filter-name>CAS HttpServletRequest WrapperFilter</filter-name>
		<filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>
	</filter>

	<filter>
		<filter-name>CAS Assertion Thread Local Filter</filter-name>
		<filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filter-class>
	</filter>

	<filter-mapping>
		<filter-name>CAS Authentication Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<filter-mapping>
		<filter-name>CAS Validation Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<filter-mapping>
		<filter-name>CAS HttpServletRequest WrapperFilter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<filter-mapping>
		<filter-name>CAS Assertion Thread Local Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>
	<!-- CAS 配置文件结束 -->
	<welcome-file-list>
		<welcome-file>index.jsp</welcome-file>
	</welcome-file-list>
</web-app>

然后编写index.jsp如下：

<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<%@page import="org.jasig.cas.client.validation.Assertion"%>
<%@page import="org.jasig.cas.client.util.AbstractCasFilter"%>
<%@page import="org.jasig.cas.client.authentication.AttributePrincipal"%>
<%
String path = request.getContextPath();
String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
%>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <base href="<%=basePath%>">
    
    <title>My JSP 'index.jsp' starting page</title>
	<meta http-equiv="pragma" content="no-cache">
	<meta http-equiv="cache-control" content="no-cache">
	<meta http-equiv="expires" content="0">    
	<meta http-equiv="keywords" content="keyword1,keyword2,keyword3">
	<meta http-equiv="description" content="This is my page">
	<!--
	<link rel="stylesheet" type="text/css" href="styles.css">
	-->
  </head>
  
  <body>
  	你已经登录进来了兄弟，下面是你的登录信息：
  	<%
  	AttributePrincipal principal = (AttributePrincipal) request.getUserPrincipal(); 

  	Map<String, Object> attributes = principal.getAttributes();
  	String userId = "";
  	String userClass = "";
  	if(attributes != null) {
  		userId = attributes.get("UserId").toString();
  		userClass = attributes.get("UserClass").toString();
  	}
  	%>
  	<p><%=userId %></p>
  	<p><%=userClass %></p>
  	<%
  		if(session != null){%>
  			<p><%=session.getId() %></p>		
  		<%}
  	%>
  	
  	<a href="https://andy:8443/cas/logout">退出登录</a>
  </body>
</html>

将其部署到tomcat-cas-client中，并修改tomcat-cas-client的端口，需要修改多处。我这里修改成端口8333。

此时，同时启动tomcat-cas-server和tomcat-cas-client，如果端口不冲突的话，访问htps://andy:8333/WebProj/index.jsp时就会被过滤器拦截并定向到https://andy:8443/cas/login?service=https://andy:8333/WebProj/index.jsp
这个地址，后面的service在IE中可能会用%代替部分字符。
在此处输入你的数据库中的账号密码，如果验证通过就能进入到htps://andy:8333/WebProj/index.jsp了。
注意：
在index.jsp中，我通过AttributePrincipal获取参数时，里面的UserId和UserClass是之前在Server端配置好的，可以查看上一篇关于此处的说明：
CAS配置第二步：服务器端的配置

cas-client-core-3.2.0.jar (84.6 KB)
下载次数: 124

3
顶

10
踩

分享到：

CAS配置第四步：CAS登陆界面的美化 | CAS配置第二步：服务器端的配置

2011-03-06 16:01
浏览 7410
评论(0)
分类:企业架构
查看更多

发表评论

您还没有登录,请您登录后再发表评论

最近访客更多访客>>

博主相关

文章分类

社区版块

存档分类

最新评论