SSO单点登录基本概念实现思路以及小的实例详解
一、什么是单点登录SSO（Single Sign-On）
SSO是一种统一认证和授权机制，指访问同一服务器不同应用中的受保护资源的同一用户，只需要登录一次，即通过一个应用中的安全验证后，再访问其他应用中的受保护资源时，不再需要重新登录验证。
二、单点登录解决了什么问题
解决了用户只需要登录一次就可以访问所有相互信任的应用系统，而不用重复登录。
三、单点登录的技术实现机制
如下图所示：
登录成功 生成ticket身份令牌 并添加到Cookie 访问其他业务则验证ticket 存在则不需要再次登录 并获取Cookie 这里可以考虑拦截器进行验证
下面一个简单的实例 利用struts2实现一次登录 就可以访问所有
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<%
String path = request.getContextPath();
String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
%>
<html>
<head>
<base href="<%=basePath%>">
<title>My JSP 'login.jsp' starting pagetitle>
<meta http-equiv="pragma" content="no-cache">
<meta http-equiv="cache-control" content="no-cache">
<meta http-equiv="expires" content="0">
<meta http-equiv="keywords" content="keyword1,keyword2,keyword3">
<meta http-equiv="description" content="This is my page">
head>
<body>
<center>
<h1>请登录h1>
<form action="${pageContext.request.contextPath}/sso/doLogin.action" name="doLogin" method="post">
用户名:<input type="text" name="username"/>
密码:<input type="password" name="password"/>
<input type="hidden" name="gotoUrl" value="${gotoUrl}"/>
<input type="submit" />
form>
center>
body>
html>
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<%
String path = request.getContextPath();
String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
%>
<html>
<head>
<base href="<%=basePath%>">
<title>欢迎访问DEMO1title>
<meta http-equiv="pragma" content="no-cache">
<meta http-equiv="cache-control" content="no-cache">
<meta http-equiv="expires" content="0">
<meta http-equiv="keywords" content="keyword1,keyword2,keyword3">
<meta http-equiv="description" content="This is my page">
head>
<body>
欢迎访问DEMO1的主页
body>
html>
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<%
String path = request.getContextPath();
String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
%>
<html>
<head>
<base href="<%=basePath%>">
<title>欢迎访问DEMO2title>
<meta http-equiv="pragma" content="no-cache">
<meta http-equiv="cache-control" content="no-cache">
<meta http-equiv="expires" content="0">
<meta http-equiv="keywords" content="keyword1,keyword2,keyword3">
<meta http-equiv="description" content="This is my page">
head>
<body>
欢迎访问DEMO2的主页
body>
html>
<struts>
<package name="sso" extends="struts-default" namespace="/sso">
<action name="doLogin" class="com.kero99.ygc.sso.SSOAction" method="doLogin">
<result name="success" type="redirect">/${gotoUrl}result>
action>
package>
<package name="dome1" extends="struts-default" namespace="/demo1">
<action name="main" class="com.kero99.ygc.demo1.Demo1Action" method="main">
<result name="success">/success1.jspresult>
<result name="login">/login.jspresult>
action>
package>
<package name="dome2" extends="struts-default" namespace="/demo2">
<action name="main" class="com.kero99.ygc.demo2.Demo2Action" method="main">
<result name="success">/success2.jspresult>
<result name="login">/login.jspresult>
action>
package>
struts>
//需要的struts2 jar
//结构流程图
package com.kero99.ygc.sso;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletResponse;
import org.apache.struts2.ServletActionContext;
import com.kero99.ygc.util.SSOCheck;
import com.opensymphony.xwork2.ActionSupport;
public class SSOAction extends ActionSupport {
/**
* SSO 登录验证 并添加到 Cookie 为了方便失败为null
* eg:http://localhost:8082/20170702_V1.0_sso/demo1/main.action
* 本人的访问路径20170702_V1.0_sso web Context root 可以进行更改成本地的
* gotoUrl 为 重定向路径
* util 下user=ygc pwd=123 为登录验证
* ckeckCookie 验证Cookie是否存在
* /demo1/main.action
* /demo2/main.action
* 进行测试
*
*/
private static final long serialVersionUID = 1L;
private String username;
private String password;
private String gotoUrl;
//登录接口
public String doLogin(){
System.out.println("login方法执行了...");
boolean ok=SSOCheck.checkLogin(username, password);
if(ok){
Cookie cookie=new Cookie("ssocookie","sso");
cookie.setPath("/");
HttpServletResponse response=ServletActionContext.getResponse();
response.addCookie(cookie);
return SUCCESS;
}
return null;
}
public String getGotoUrl() {
return gotoUrl;
}
public void setGotoUrl(String gotoUrl) {
this.gotoUrl = gotoUrl;
}
public String getUsername() {
return username;
}
public void setUsername(String username) {
this.username = username;
}
public String getPassword() {
return password;
}
public void setPassword(String password) {
this.password = password;
}
}
package com.kero99.ygc.util;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
public class SSOCheck {
private static final String USERNAME="ygc";
private static final String PASSWORD="123";
//验证登录
public static boolean checkLogin(String username,String password){
if(username.equals(USERNAME) && password.equals(PASSWORD)){
return true;
}
return false;
}
//登录效验接口
public static boolean ckeckCookie(HttpServletRequest request){
Cookie[] cookies=request.getCookies();
if(cookies!=null){
for(Cookie cookie:cookies){
if(cookie.getName().equals("ssocookie") && cookie.getValue().equals("sso")){
return true;
}
}
}
return false;
}
}
package com.kero99.ygc.demo1;
import javax.servlet.http.HttpServletRequest;
import org.apache.struts2.ServletActionContext;
import com.kero99.ygc.util.SSOCheck;
import com.opensymphony.xwork2.ActionSupport;
public class Demo1Action extends ActionSupport {
/**
* Demo1接口
*/
private static final long serialVersionUID = 1L;
private String gotoUrl;
public String main(){
HttpServletRequest request=ServletActionContext.getRequest();
if(SSOCheck.ckeckCookie(request)){
return SUCCESS;
}
gotoUrl="/demo1/main.action";
return LOGIN;
}
public String getGotoUrl() {
return gotoUrl;
}
public void setGotoUrl(String gotoUrl) {
this.gotoUrl = gotoUrl;
}
}
package com.kero99.ygc.demo2;
import javax.servlet.http.HttpServletRequest;
import org.apache.struts2.ServletActionContext;
import com.kero99.ygc.util.SSOCheck;
import com.opensymphony.xwork2.ActionSupport;
public class Demo2Action extends ActionSupport {
/**
* Demo2接口
*/
private static final long serialVersionUID = 1L;
private String gotoUrl;
public String main(){
HttpServletRequest request=ServletActionContext.getRequest();
if(SSOCheck.ckeckCookie(request)){
return SUCCESS;
}
gotoUrl="/demo2/main.action";
return LOGIN;
}
public String getGotoUrl() {
return gotoUrl;
}
public void setGotoUrl(String gotoUrl) {
this.gotoUrl = gotoUrl;
}
}