CAS 5.3.1系列之自定义JDBC认证策略（三）

左手的ㄟ右手 2021-08-28 23:07 387阅读 0赞

CAS官方文档是介绍基于配置实现jdbc认证的，可以参考我博客：[CAS 5.3.1系列之支持JDBC认证登录（二）][CAS 5.3.1_JDBC]，不过我们也可以通过自定义认证策略的方式实现jdbc认证，pom先加入相关jar

<dependency>
                <groupId>org.apereo.cas</groupId>
                <artifactId>cas-server-core-authentication-api</artifactId>
                <version>${cas.version}</version>
            </dependency>
    
            
            <dependency>
                <groupId>org.apereo.cas</groupId>
                <artifactId>cas-server-core-configuration-api</artifactId>
                <version>${cas.version}</version>
            </dependency>
    
            <dependency>
                <groupId>org.apereo.cas</groupId>
                <artifactId>cas-server-support-generic</artifactId>
                <version>${cas.version}</version>
            </dependency>

5.3.1版本可以实现AbstractPreAndPostProcessingAuthenticationHandler抽象类，重写doAuthentication方法实现：

package org.muses.jeeplatform.cas.authentication.handler;
    
    
    import org.apereo.cas.authentication.*;
    import org.apereo.cas.authentication.handler.support.AbstractPreAndPostProcessingAuthenticationHandler;
    import org.apereo.cas.authentication.principal.PrincipalFactory;
    import org.apereo.cas.services.ServicesManager;
    import org.muses.jeeplatform.cas.user.model.User;
    import org.slf4j.LoggerFactory;
    import org.springframework.jdbc.core.BeanPropertyRowMapper;
    import org.springframework.jdbc.core.JdbcTemplate;
    import org.springframework.jdbc.datasource.DriverManagerDataSource;
    
    import javax.security.auth.login.AccountException;
    import javax.security.auth.login.FailedLoginException;
    import java.security.GeneralSecurityException;
    import java.util.*;
    
    public class UsernamePasswordAuthenticationHandler extends AbstractPreAndPostProcessingAuthenticationHandler { 
        private static final org.slf4j.Logger logger = LoggerFactory.getLogger(UsernamePasswordAuthenticationHandler.class);
    
        public UsernamePasswordAuthenticationHandler(String name, ServicesManager servicesManager, PrincipalFactory principalFactory, Integer order) { 
            super(name, servicesManager, principalFactory, order);
        }
    
        @Override
        protected AuthenticationHandlerExecutionResult doAuthentication(Credential credential) throws GeneralSecurityException, PreventedException { 
            UsernamePasswordCredential usernamePasswordCredential = (UsernamePasswordCredential) credential;
    
            String username = usernamePasswordCredential.getUsername();
            String password = usernamePasswordCredential.getPassword();
    
    
            // 先构建数据库驱动连接池
            DriverManagerDataSource dataSource = new DriverManagerDataSource();
            dataSource.setDriverClassName("com.mysql.jdbc.Driver");
            dataSource.setUrl("jdbc:mysql://192.169.0.198:33306/jeeplatform");
            dataSource.setUsername("root");
            dataSource.setPassword("root");
    
            // 创建JDBC模板
            JdbcTemplate jdbcTemplate = new JdbcTemplate();
            jdbcTemplate.setDataSource(dataSource);
    
            String sql = "SELECT * FROM sys_user WHERE username = ?";
    
            User info = (User) jdbcTemplate.queryForObject(sql, new Object[]{ username}, new BeanPropertyRowMapper(User.class));
    
    
            if (info == null) { 
                throw new AccountException("Sorry, username not found!");
            }
    
            if (!info.getPassword().equals(password)) { 
                throw new FailedLoginException("Sorry, password not correct!");
            } else { 
    
                final List<MessageDescriptor> list = new ArrayList<>();
    
                return createHandlerResult(usernamePasswordCredential,
                        this.principalFactory.createPrincipal(username, Collections.emptyMap()), list);
            }
        }
    
    
        @Override
        public boolean supports(Credential credential) { 
            return credential instanceof UsernamePasswordCredential;
        }
    }

新增一个配置类，实现AuthenticationEventExecutionPlanConfigurer接口

package org.muses.jeeplatform.cas.authentication.config;
    
    
    import org.apereo.cas.authentication.*;
    import org.apereo.cas.authentication.principal.DefaultPrincipalFactory;
    import org.apereo.cas.configuration.CasConfigurationProperties;
    import org.apereo.cas.services.ServicesManager;
    import org.muses.jeeplatform.cas.authentication.handler.UsernamePasswordAuthenticationHandler;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.beans.factory.annotation.Qualifier;
    import org.springframework.boot.context.properties.EnableConfigurationProperties;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    
    
    @Configuration("UsernamePasswordAuthConfig")
    @EnableConfigurationProperties(CasConfigurationProperties.class)
    public class UsernamePasswordAuthConfig implements AuthenticationEventExecutionPlanConfigurer { 
    
        @Autowired
        private CasConfigurationProperties casProperties;
    
        @Autowired
        @Qualifier("servicesManager")
        private ServicesManager servicesManager;
    
    
        @Bean
        public PrePostAuthenticationHandler myAuthenticationHandler() { 
            return new UsernamePasswordAuthenticationHandler(UsernamePasswordAuthenticationHandler.class.getName(),
                    servicesManager, new DefaultPrincipalFactory(), 1);
        }
    
        @Override
        public void configureAuthenticationExecutionPlan(AuthenticationEventExecutionPlan plan) { 
            plan.registerAuthenticationHandler(myAuthenticationHandler());
        }
    }

在META-INF文件夹，新增一个命名为spring.factories的文件  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70]

org.springframework.boot.autoconfigure.EnableAutoConfiguration=\
    org.muses.jeeplatform.cas.authentication.config.UsernamePasswordAuthConfig

为什么要这样做？因为这样做才能将配置类加载到spring容器，详情需要跟下源码，可以参考我博客：[SpringBoot源码学习系列之自动配置原理简介][SpringBoot]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 1]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 2]

代码例子参考：[github下载链接][github]

详情可以参考官方文档：https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties.html

优质参考博客：  
https://www.cnblogs.com/jpeanut/tag/CAS/  
https://blog.csdn.net/anumbrella/category\_7765386.html

[CAS 5.3.1_JDBC]: https://smilenicky.blog.csdn.net/article/details/105603895
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70]: /images/20210813/4fa1904fe3964d18a75ae27e77f2cf2a.png
[SpringBoot]: https://blog.csdn.net/u014427391/article/details/102844681
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 1]: /images/20210813/59957ee6797c45cf8546f14867841473.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 2]: /images/20210813/fa12b2e1ac714f8eb8e1b573d239aec9.png
[github]: https://github.com/u014427391/jeeplatform/tree/master/code/jeeplatform-sso-cas