SpringBoot集成CAS客戶端

針對cas實現單點登錄主要是兩個部分，一個部分是client，一個部分是server。對於client，我們實現的時候需要在自己的項目中引入相應的jar包，然後增加相應的配置，並且實現相應的過濾器即可。而針對server，目前在cas的官網上下載的server都是springmvc的工程，所以建議直接下載使用，並且根據自己的需要進行修改配置，而不建議將server工程修改成springBoot工程。

（1）添加相應的maven依賴

 <dependency>
 <groupid>org.jasig.cas.client/<groupid>
 <artifactid>cas-client-core/<artifactid>
 <version>3.3.3/<version>
 /<dependency>

（2）在application.properties中增加配置項

#cas config
spring.cas.sign-out-filters=/logout
spring.cas.auth-filters=/*
spring.cas.validate-filters=/*
spring.cas.request-wrapper-filters=/*
spring.cas.assertion-filters=/*
spring.cas.cas-server-login-url=http://localhost:8080/login
spring.cas.cas-server-url-prefix=http://localhost:8080
spring.cas.redirect-after-validation=true
spring.cas.use-session=true
spring.cas.server-name=http://localhost:8001

注意上面的spring.cas.cas-server-login-url是登錄地址的url，spring.cas.cas-server-url-prefix是登錄地址的IP，spring.cas.server-name是添加單點登錄服務的IP。

（3）添加cas自動配置項

import org.springframework.boot.context.properties.ConfigurationProperties;
 
import java.util.Arrays;
import java.util.List;
 
@ConfigurationProperties(prefix = "spring.cas")
public class SpringCasAutoconfig {
 
 static final String separator = ",";
 
 private String validateFilters;
 private String signOutFilters;
 private String authFilters;
 private String assertionFilters;
 private String requestWrapperFilters;
  

 private String casServerUrlPrefix;
 private String casServerLoginUrl;
 private String serverName;
 private boolean useSession = true;
 private boolean redirectAfterValidation = true;
 
 public List<string> getValidateFilters() {
 return Arrays.asList(validateFilters.split(separator));
 }
 public void setValidateFilters(String validateFilters) {
 this.validateFilters = validateFilters;
 }
 public List<string> getSignOutFilters() {
 return Arrays.asList(signOutFilters.split(separator));
 }
 public void setSignOutFilters(String signOutFilters) {
 this.signOutFilters = signOutFilters;
 }
 public List<string> getAuthFilters() {
 return Arrays.asList(authFilters.split(separator));
 }
 public void setAuthFilters(String authFilters) {
 this.authFilters = authFilters;
 }
 public List<string> getAssertionFilters() {
 return Arrays.asList(assertionFilters.split(separator));
 }
 public void setAssertionFilters(String assertionFilters) {
 this.assertionFilters = assertionFilters;
 }
 public List<string> getRequestWrapperFilters() {
 return Arrays.asList(requestWrapperFilters.split(separator));
 }
 public void setRequestWrapperFilters(String requestWrapperFilters) {
 this.requestWrapperFilters = requestWrapperFilters;
 }
 public String getCasServerUrlPrefix() {
 return casServerUrlPrefix;
 }
 public void setCasServerUrlPrefix(String casServerUrlPrefix) {
 this.casServerUrlPrefix = casServerUrlPrefix;
 }
 public String getCasServerLoginUrl() {
 return casServerLoginUrl;
 }
 public void setCasServerLoginUrl(String casServerLoginUrl) {
 this.casServerLoginUrl = casServerLoginUrl;
 }
 public String getServerName() {
 return serverName; 

 }
 public void setServerName(String serverName) {
 this.serverName = serverName;
 }
 public boolean isRedirectAfterValidation() {
 return redirectAfterValidation;
 }
 public void setRedirectAfterValidation(boolean redirectAfterValidation) {
 this.redirectAfterValidation = redirectAfterValidation;
 }
 public boolean isUseSession() {
 return useSession;
 }
 public void setUseSession(boolean useSession) {
 this.useSession = useSession;
 }
 
}
/<string>/<string>/<string>/<string>/<string>

（4）增加需要的過濾器

import org.jasig.cas.client.authentication.AuthenticationFilter;
import org.jasig.cas.client.session.SingleSignOutFilter;
import org.jasig.cas.client.session.SingleSignOutHttpSessionListener;
import org.jasig.cas.client.util.AssertionThreadLocalFilter;
import org.jasig.cas.client.util.HttpServletRequestWrapperFilter;
import org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.boot.web.servlet.ServletListenerRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.web.authentication.logout.LogoutFilter;
import org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler;
 
 
@Configuration
public class CasConfig {
 
 @Autowired
 SpringCasAutoconfig autoconfig;
 
 private static boolean casEnabled = true;
 
 public CasConfig() {
 }
  

 @Bean
 public SpringCasAutoconfig getSpringCasAutoconfig(){
 return new SpringCasAutoconfig();
 }
 
 /**
 * 用於實現單點登出功能
 */
 @Bean
 public ServletListenerRegistrationBean<singlesignouthttpsessionlistener> singleSignOutHttpSessionListener() {
 ServletListenerRegistrationBean<singlesignouthttpsessionlistener> listener = new ServletListenerRegistrationBean<>();
 listener.setEnabled(casEnabled);
 listener.setListener(new SingleSignOutHttpSessionListener());
 listener.setOrder(1);
 return listener;
 }
 
 /**
 * 該過濾器用於實現單點登出功能，單點退出配置，一定要放在其他filter之前
 */
 @Bean
 public FilterRegistrationBean logOutFilter() {
 FilterRegistrationBean filterRegistration = new FilterRegistrationBean();
 LogoutFilter logoutFilter = new LogoutFilter(autoconfig.getCasServerUrlPrefix() + "/logout?service=" + autoconfig.getServerName(),new SecurityContextLogoutHandler());
 filterRegistration.setFilter(logoutFilter);
 filterRegistration.setEnabled(casEnabled);
 if(autoconfig.getSignOutFilters().size()>0)
 filterRegistration.setUrlPatterns(autoconfig.getSignOutFilters());
 else
 filterRegistration.addUrlPatterns("/logout");
 filterRegistration.addInitParameter("casServerUrlPrefix", autoconfig.getCasServerUrlPrefix());
 filterRegistration.addInitParameter("serverName", autoconfig.getServerName());
 filterRegistration.setOrder(2);
 return filterRegistration;
 }
 
 /**
 * 該過濾器用於實現單點登出功能，單點退出配置，一定要放在其他filter之前
 */
 @Bean
 public FilterRegistrationBean singleSignOutFilter() {
 FilterRegistrationBean filterRegistration = new FilterRegistrationBean();
 filterRegistration.setFilter(new SingleSignOutFilter()); 

 filterRegistration.setEnabled(casEnabled);
 if(autoconfig.getSignOutFilters().size()>0)
 filterRegistration.setUrlPatterns(autoconfig.getSignOutFilters());
 else
 filterRegistration.addUrlPatterns("/*");
 filterRegistration.addInitParameter("casServerUrlPrefix", autoconfig.getCasServerUrlPrefix());
 filterRegistration.addInitParameter("serverName", autoconfig.getServerName());
 filterRegistration.setOrder(3);
 return filterRegistration;
 }
 
 /**
 * 該過濾器負責用戶的認證工作
 */
 @Bean
 public FilterRegistrationBean authenticationFilter() {
 FilterRegistrationBean filterRegistration = new FilterRegistrationBean();
 filterRegistration.setFilter(new AuthenticationFilter());
 filterRegistration.setEnabled(casEnabled);
 if(autoconfig.getAuthFilters().size()>0)
 filterRegistration.setUrlPatterns(autoconfig.getAuthFilters());
 else
 filterRegistration.addUrlPatterns("/*");
 //casServerLoginUrl:cas服務的登陸url
 filterRegistration.addInitParameter("casServerLoginUrl", autoconfig.getCasServerLoginUrl());
 //本項目登錄ip+port
 filterRegistration.addInitParameter("serverName", autoconfig.getServerName());
 filterRegistration.addInitParameter("useSession", autoconfig.isUseSession()?"true":"false");
 filterRegistration.addInitParameter("redirectAfterValidation", autoconfig.isRedirectAfterValidation()?"true":"false");
 filterRegistration.setOrder(4);
 return filterRegistration;
 }
 
 /**
 * 該過濾器負責對Ticket的校驗工作
 */
 @Bean
 public FilterRegistrationBean cas20ProxyReceivingTicketValidationFilter() {
 FilterRegistrationBean filterRegistration = new FilterRegistrationBean();
 Cas20ProxyReceivingTicketValidationFilter cas20ProxyReceivingTicketValidationFilter = new Cas20ProxyReceivingTicketValidationFilter();
 cas20ProxyReceivingTicketValidationFilter.setServerName(autoconfig.getServerName());
 filterRegistration.setFilter(cas20ProxyReceivingTicketValidationFilter);
 filterRegistration.setEnabled(casEnabled);
 if(autoconfig.getValidateFilters().size()>0)
 filterRegistration.setUrlPatterns(autoconfig.getValidateFilters());
 else
 filterRegistration.addUrlPatterns("/*"); 

 filterRegistration.addInitParameter("casServerUrlPrefix", autoconfig.getCasServerUrlPrefix());
 filterRegistration.addInitParameter("serverName", autoconfig.getServerName());
 filterRegistration.setOrder(5);
 return filterRegistration;
 }
 
 
 /**
 * 該過濾器對HttpServletRequest請求包裝， 可通過HttpServletRequest的getRemoteUser()方法獲得登錄用戶的登錄名
 *
 */
 @Bean
 public FilterRegistrationBean httpServletRequestWrapperFilter() {
 FilterRegistrationBean filterRegistration = new FilterRegistrationBean();
 filterRegistration.setFilter(new HttpServletRequestWrapperFilter());
 filterRegistration.setEnabled(true);
 if(autoconfig.getRequestWrapperFilters().size()>0)
 filterRegistration.setUrlPatterns(autoconfig.getRequestWrapperFilters());
 else
 filterRegistration.addUrlPatterns("/login");
 filterRegistration.setOrder(6);
 return filterRegistration;
 }
 
 /**
 * 該過濾器使得可以通過org.jasig.cas.client.util.AssertionHolder來獲取用戶的登錄名。
 比如AssertionHolder.getAssertion().getPrincipal().getName()。
 這個類把Assertion信息放在ThreadLocal變量中，這樣應用程序不在web層也能夠獲取到當前登錄信息
 */
 @Bean
 public FilterRegistrationBean assertionThreadLocalFilter() {
 FilterRegistrationBean filterRegistration = new FilterRegistrationBean();
 filterRegistration.setFilter(new AssertionThreadLocalFilter());
 filterRegistration.setEnabled(true);
 if(autoconfig.getAssertionFilters().size()>0)
 filterRegistration.setUrlPatterns(autoconfig.getAssertionFilters());
 else
 filterRegistration.addUrlPatterns("/*");
 filterRegistration.setOrder(7);
 return filterRegistration;
 }
  

 
}
/<singlesignouthttpsessionlistener>/<singlesignouthttpsessionlistener>

至此就完成了SpringBoot集成cas客戶端，詳細代碼可參考gitHub地址：springboot-cas client