SpringBoot+Vue整合CAS
依赖
org.springframework.boot
spring-boot-starter-web
org.projectlombok
lombok
true
cn.hutool
hutool-all
5.8.11
net.unicon.cas
cas-client-autoconfig-support
2.3.0-GA
配置
server:
port: 8088
#cas服务端的地址
cas:
server-url-prefix: http://test.sso.shanhaiyh.com
#cas服务端的登录地址
server-login-url: http://test.sso.shanhaiyh.com/login
#客户端访问地址
client-host-url: http://192.168.1.216:8088
#验证的协议
validation-type: cas
配置类 CasAutoConfig
package com.example.cas.config;
import net.unicon.cas.client.configuration.CasClientConfigurerAdapter;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import org.springframework.web.filter.CorsFilter;
import java.util.ArrayList;
import java.util.Collections;
import java.util.Map;
@Configuration
public class CasAutoConfig extends CasClientConfigurerAdapter {
@Value("${cas.server-login-url}")
private String serverLoginUrl;
@Value("${cas.client-host-url}")
private String serverLocalUrl;
@Value("${cas.server-url-prefix}")
private String serverUrlPrefix;
@Override
public void configureAuthenticationFilter(FilterRegistrationBean authenticationFilter) {
Map<String, String> initParameters = authenticationFilter.getInitParameters();
initParameters.put("authenticationRedirectStrategyClass", "com.example.cas.config.CustomAuthRedirectStrategy");
}
@Override
public void configureValidationFilter(FilterRegistrationBean validationFilter) {
Map<String, String> initParameters = validationFilter.getInitParameters();
initParameters.put("encodeServiceUrl", "false");
// 配置地址，这里还可以配置很多，例如cas重定向策略等。
initParameters.put("ignorePattern", "/casLogin/*");
validationFilter.setInitParameters(initParameters);
super.configureAuthenticationFilter(validationFilter);
}
@Bean
public FilterRegistrationBean corsFilter() {
// 1.创建 CORS 配置对象
CorsConfiguration config = new CorsConfiguration();
// 支持域
ArrayList<String> strings = new ArrayList<>();
strings.add("http://192.168.1.216:8088");
config.setAllowedOriginPatterns(Collections.singletonList("*"));
// 是否发送 Cookie
config.setAllowCredentials(true);
// 支持请求方式
config.addAllowedMethod("*");
// 允许的原始请求头部信息
config.addAllowedHeader("*");
// 暴露的头部信息
config.addExposedHeader("*");
// 2.添加地址映射
UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
source.registerCorsConfiguration("/**", config);
FilterRegistrationBean<CorsFilter> registrationBean = new FilterRegistrationBean<>();
registrationBean.setFilter(new CorsFilter(source));
registrationBean.setOrder(-2147483648);
return registrationBean;
}
}
解决前后端分离时跨越问题
package com.example.cas.config;
import com.example.cas.common.ResData;
import org.jasig.cas.client.authentication.AuthenticationRedirectStrategy;
import org.springframework.stereotype.Component;
import org.springframework.util.StringUtils;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.PrintWriter;
@Component
public class CustomAuthRedirectStrategy implements AuthenticationRedirectStrategy {
@Override
public void redirect(HttpServletRequest request, HttpServletResponse response, String s) throws IOException {
response.setCharacterEncoding("utf-8");
response.setContentType("application/json; charset=utf-8");
String url = request.getParameter("url");
if (!StringUtils.isEmpty(url)) {
url = "http://192.168.1.216:9528/";
}
PrintWriter out = response.getWriter();
String data = ResData.error(401, "登录认证失败,请重新登录", "http://test.sso.shanhaiyh.com/login?service=http://192.168.1.216:8088/casLogin?url=" + url).toString();
out.write(data);
out.flush();
out.close();
}
}
测试控制器
package com.example.cas.controller;
import cn.hutool.http.HttpRequest;
import cn.hutool.http.HttpResponse;
import com.alibaba.fastjson2.JSON;
import com.alibaba.fastjson2.JSONObject;
import com.example.cas.common.ResData;
import com.example.cas.vo.PowerRmiVo;
import org.jasig.cas.client.authentication.AttributePrincipal;
import org.jasig.cas.client.validation.AssertionImpl;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Controller;
import org.springframework.util.StringUtils;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ResponseBody;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.IOException;
import java.net.URLEncoder;
import java.nio.charset.StandardCharsets;
import java.util.List;
@Controller
public class CASController {
@Value("${cas.server-login-url}")
private String serverLoginUrl;
@Value("${cas.client-host-url}")
private String serverLocalUrl;
@GetMapping("/casLogin")
public String casLogin(HttpServletRequest request, HttpServletResponse response) throws IOException {
String url = request.getParameter("url");
if (!StringUtils.isEmpty(url)) {
url = "http://192.168.1.216:9528/";
}
//由于用户信息存储在session中，因此可以从session中获取到存储用户信息的AssertionImpl对象从而获取用户信息
HttpSession session = request.getSession();
AssertionImpl assertion = (AssertionImpl) session.getAttribute("_const_cas_assertion_");
String username = null;
String ssoUrl = "";
if (assertion != null) {
AttributePrincipal principal = assertion.getPrincipal();
username = principal.getName();
if (StringUtils.isEmpty(username)) {
ssoUrl = serverLoginUrl + "?service=" + URLEncoder.encode(serverLocalUrl + "/casLogin?url=" + url, StandardCharsets.UTF_8);
return "redirect:" + ssoUrl;
}
}
return "redirect:" + url;
}
@RequestMapping("/order")
@ResponseBody
public Object order(HttpServletRequest request) throws IOException {
return ResData.success(HttpServletResponse.SC_OK, "操作成功", request.getParameter("id"));
}
@RequestMapping("/casLogout")
@ResponseBody
public ResData casLogout(HttpSession session) throws IOException {
session.invalidate();
String ssoUrl = serverLoginUrl + "?service=" + URLEncoder.encode(serverLocalUrl + "/cas/casLogin", StandardCharsets.UTF_8);
return ResData.success(HttpServletResponse.SC_OK, "退出成功", ssoUrl);
}
@GetMapping("/getUserInfo")
@ResponseBody
public Object getUserInfo(HttpServletRequest request) throws IOException {
//由于用户信息存储在session中，因此可以从session中获取到存储用户信息的AssertionImpl对象从而获取用户信息
HttpSession session = request.getSession();
AssertionImpl assertion = (AssertionImpl) session.getAttribute("_const_cas_assertion_");
if (assertion != null) {
AttributePrincipal principal = assertion.getPrincipal();
String username = principal.getName();
return ResData.success(1, "操作成功", username);
}
return ResData.error(0, "操作失败", "");
}
@GetMapping("/getMenuList")
@ResponseBody
public Object getMenus(HttpServletRequest request) throws IOException {
//由于用户信息存储在session中，因此可以从session中获取到存储用户信息的AssertionImpl对象从而获取用户信息
HttpSession session = request.getSession();
AssertionImpl assertion = (AssertionImpl) session.getAttribute("_const_cas_assertion_");
if (assertion != null) {
AttributePrincipal principal = assertion.getPrincipal();
String username = principal.getName();
String url = "https://api.shanhaiyh.com/shiant-api-c/service";
List<PowerRmiVo> lists = null;
for (int i = 0; i < 3; i++) {
HttpResponse response = HttpRequest.get(url + "/shop/getMenuByUserName?userName=" + username).execute();
if (response != null) {
String body = response.body();
JSONObject jsonObject = JSON.parseObject(body);
Object code = jsonObject.get("code").toString();
if ("0".equals(code)) {
Object data1 = jsonObject.get("data");
lists = JSON.parseArray(data1.toString(), PowerRmiVo.class);
break;
}
}
}
return ResData.success(1, "操作成功", lists);
}
return ResData.error(0, "操作失败", "");
}
}
测试效果：
单点登录成功后通过用户查询到的菜单信息
