Cas5.2之用户密码邮箱找回-yellowcong

今天药忘吃喽~ 2022-05-28 10:29 361阅读 0赞

> cas5.2里面集成了密码找回的功能，1、配置邮箱服务器，2、添加邮箱依赖，3、添加application.properties配置，4、启动服务，测试。

## 1、创建邮箱服务 ##

### 1.1、qq邮箱开启SMTP服务 ###

我这个是QQ浏邮箱 [https://mail.qq.com/][https_mail.qq.com] ，创建授权码  
![这里写图片描述][SouthEast]

生成授权码，这个授权码是我们配置poi的服务器密码，而不是我们登录的qq的密码，我刚开始直接用的QQ密码，我是猴子请来的逗比啊。  
![这里写图片描述][SouthEast 1]

#### 配置application.properties ####

#发送邮件
    spring.mail.host=smtp.qq.com
    spring.mail.port=465
    #邮箱用户名(qq账户)
    spring.mail.username=717350389@qq.com
    #邮箱授权码(qq授权码)
    spring.mail.password=zkyqtswrbqmhbbaa
    spring.mail.testConnection=false
    spring.mail.properties.mail.smtp.auth=true
    
    #必须ssl
    spring.mail.properties.mail.smtp.ssl.enable=true

实现的效果  
![这里写图片描述][SouthEast 2]

### 1.2阿里邮箱pop配置 ###

#密码管理开始
    cas.authn.pm.enabled=true
    
    #发送邮件
    spring.mail.host=smtp.aliyun.com
    spring.mail.port=465
    #邮箱用户名(阿里邮箱)
    spring.mail.username=yellowcong@aliyun.com
    #邮箱密码(阿里密码)
    spring.mail.password=xxxxxx..
    spring.mail.testConnection=false
    spring.mail.properties.mail.smtp.auth=true

实现效果  
![这里写图片描述][SouthEast 3]

## 2、添加邮箱依赖到pom.xml ##

我这个地方下载不到这个依赖包，所以我直接下载后，然后导入到项目中

<dependency>
      <groupId>org.apereo.cas</groupId>
      <artifactId>cas-server-support-pm-jdbc-5.2.2</artifactId>
      <version>${cas.version}</version>
      <scope>system</scope>
      <optional>true</optional>
      <systemPath>${project.basedir}/src/main/webapp/WEB-INF/lib/cas-server-support-pm-jdbc-5.2.2.jar</systemPath>
    </dependency>

## 3、配置application.properties文件 ##

添加邮箱中邮件的查询配置。

#密码管理开始
    cas.authn.pm.enabled=true
    #发送邮件
    spring.mail.host=smtp.qq.com
    spring.mail.port=465
    #邮箱用户名(qq账户)
    spring.mail.username=717350389@qq.com
    #邮箱授权码(qq授权码)
    spring.mail.password=zkyqtswrbqmhbbaa
    spring.mail.testConnection=false
    spring.mail.properties.mail.smtp.auth=true
    
    #必须ssl
    spring.mail.properties.mail.smtp.ssl.enable=true
    
    cas.authn.pm.reset.from=${spring.mail.username}
    #发送邮件标题
    cas.authn.pm.reset.subject=yellowcong.com 重置密码
    #邮件内容，必须要有%s，因为会生成一个连接并且带了token，否则无法打开链接，当然这个链接也和cas.server.prefix有关系
    cas.authn.pm.reset.text=打开以下链接重置您的密码（yellowcong.com）: %s
    #token失效分钟数
    cas.authn.pm.reset.expirationMinutes=10
    cas.authn.pm.reset.emailAttribute=mail
    
    #新密码必须匹配表达式
    cas.authn.pm.policyPattern=\\w{
       6,24}
    
    #邮箱查找
    #根据用户名查找邮箱
    cas.authn.pm.jdbc.sqlFindEmail=SELECT email FROM cas_auth_user WHERE user_name = ?
    #修改密码
    cas.authn.pm.jdbc.sqlChangePassword=update cas_auth_user set password=? where user_name=?
    cas.authn.pm.jdbc.url=${cas.authn.jdbc.query[0].url}
    cas.authn.pm.jdbc.user=${cas.authn.jdbc.query[0].user}
    cas.authn.pm.jdbc.password=${cas.authn.jdbc.query[0].password}
    cas.authn.pm.jdbc.dialect=${cas.authn.jdbc.query[0].dialect}
    cas.authn.pm.jdbc.driverClass=${cas.authn.jdbc.query[0].driverClass}
    #密码修改加密规则，这个必须要和原始密码加密规则一致
    cas.authn.pm.jdbc.passwordEncoder.type=${cas.authn.jdbc.query[0].passwordEncoder.type}
    cas.authn.pm.jdbc.passwordEncoder.characterEncoding=${cas.authn.jdbc.query[0].passwordEncoder.characterEncoding}
    cas.authn.pm.jdbc.passwordEncoder.encodingAlgorithm=${cas.authn.jdbc.query[0].passwordEncoder.encodingAlgorithm}
    cas.authn.pm.jdbc.passwordEncoder.secret=${cas.authn.jdbc.query[0].passwordEncoder.secret}
    #默认是false，不会提交update语句
    cas.authn.pm.jdbc.autocommit=true
    
    #是否开启问题回答
    cas.authn.pm.reset.securityQuestionsEnabled=false
    #根据用户名查找问题
    cas.authn.pm.jdbc.sqlSecurityQuestions=select question, answer from sys_user_question where username=?
    
    #密码管理 结束

### 完整pom.xml配置 ###

##
    # CAS Server Context Configuration
    #
    server.context-path=/
    server.port=80
    
    #SSL配置 开启https
    server.ssl.enabled=false
    
    cas.tgc.secure=false
    cas.warningCookie.secure=false
    
    #配置oauth2.0授权服务的信息
    #配置授权，需要配置 server name的信息，不然就会跑到
    cas.server.name=http://yellowcong.com:${server.port}
    cas.server.prefix=${cas.server.name}
    
    server.max-http-header-size=2097152
    server.use-forward-headers=true
    server.connection-timeout=20000
    server.error.include-stacktrace=ALWAYS
    
    server.compression.enabled=true
    server.compression.mime-types=application/javascript,application/json,application/xml,text/html,text/xml,text/plain
    
    server.tomcat.max-http-post-size=2097152
    server.tomcat.basedir=build/tomcat
    server.tomcat.accesslog.enabled=true
    server.tomcat.accesslog.pattern=%t %a "%r" %s (%D ms)
    server.tomcat.accesslog.suffix=.log
    server.tomcat.max-threads=10
    server.tomcat.port-header=X-Forwarded-Port
    server.tomcat.protocol-header=X-Forwarded-Proto
    server.tomcat.protocol-header-https-value=https
    server.tomcat.remote-ip-header=X-FORWARDED-FOR
    server.tomcat.uri-encoding=UTF-8
    
    spring.http.encoding.charset=UTF-8
    spring.http.encoding.enabled=true
    spring.http.encoding.force=true
    
    ##
    # CAS Cloud Bus Configuration
    #
    spring.cloud.bus.enabled=false
    # spring.cloud.bus.refresh.enabled=true
    # spring.cloud.bus.env.enabled=true
    # spring.cloud.bus.destination=CasCloudBus
    # spring.cloud.bus.ack.enabled=true
    
    endpoints.enabled=false
    endpoints.sensitive=true
    
    endpoints.restart.enabled=false
    endpoints.shutdown.enabled=false
    
    management.security.enabled=true
    management.security.roles=ACTUATOR,ADMIN
    management.security.sessions=if_required
    management.context-path=/status
    management.add-application-context-header=false
    
    security.basic.authorize-mode=role
    security.basic.enabled=false
    security.basic.path=/cas/status/**
    
    ##
    # CAS Web Application Session Configuration
    #
    server.session.timeout=300
    server.session.cookie.http-only=true
    server.session.tracking-modes=COOKIE
    
    ##
    # CAS Thymeleaf View Configuration
    #
    spring.thymeleaf.encoding=UTF-8
    spring.thymeleaf.cache=true
    spring.thymeleaf.mode=HTML
    ##
    # CAS Log4j Configuration
    #
    # logging.config=file:/etc/cas/log4j2.xml
    server.context-parameters.isLog4jAutoInitializationDisabled=true
    
    ##
    # CAS AspectJ Configuration
    #
    spring.aop.auto=true
    spring.aop.proxy-target-class=true
    
    
    ##
    # CAS Authentication Credentials
    #
    #记住我
    cas.ticket.tgt.rememberMe.enabled=true
    cas.ticket.tgt.rememberMe.timeToKillInSeconds=3600
    
    #退出后转发到对应的service
    cas.logout.followServiceRedirects=true
    
    #开启识别json文件，默认false
    cas.serviceRegistry.initFromJson=true
    
    
    #-----------------------------数据库认证--------------------------------
    #SELECT * FROM cas_auth_user;
    cas.authn.jdbc.query[0].sql=SELECT * FROM cas_auth_user WHERE user_name = ?   
    #select * from cms_auth_user where user_name=?
    cas.authn.jdbc.query[0].healthQuery=SELECT 1
    cas.authn.jdbc.query[0].isolateInternalQueries=false
    #cas.authn.jdbc.query[0].url=jdbc:mysql://192.168.156.43:3306/cas?useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&useSSL=false
    cas.authn.jdbc.query[0].url=jdbc:mysql://127.0.0.1:3306/cas?useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&useSSL=false
    cas.authn.jdbc.query[0].failFast=true
    cas.authn.jdbc.query[0].isolationLevelName=ISOLATION_READ_COMMITTED
    cas.authn.jdbc.query[0].dialect=org.hibernate.dialect.MySQLDialect
    cas.authn.jdbc.query[0].leakThreshold=10
    cas.authn.jdbc.query[0].propagationBehaviorName=PROPAGATION_REQUIRED
    cas.authn.jdbc.query[0].batchSize=1
    cas.authn.jdbc.query[0].user=cas
    #cas.authn.jdbc.query[0].ddlAuto=create-drop
    cas.authn.jdbc.query[0].maxAgeDays=180
    cas.authn.jdbc.query[0].password=cas
    cas.authn.jdbc.query[0].autocommit=false
    cas.authn.jdbc.query[0].driverClass=com.mysql.jdbc.Driver
    cas.authn.jdbc.query[0].idleTimeout=5000
    # cas.authn.jdbc.query[0].credentialCriteria=
    # cas.authn.jdbc.query[0].name=
    # cas.authn.jdbc.query[0].order=0
    # cas.authn.jdbc.query[0].dataSourceName=
    # cas.authn.jdbc.query[0].dataSourceProxy=false
    #密码字段的信息
    cas.authn.jdbc.query[0].fieldPassword=PASSWORD
    #加密策略
    cas.authn.jdbc.query[0].passwordEncoder.type=DEFAULT
    cas.authn.jdbc.query[0].passwordEncoder.characterEncoding=UTF-8
    #MD5加密策略
    cas.authn.jdbc.query[0].passwordEncoder.encodingAlgorithm=MD5
    
    #####################################
    #密码管理开始
    cas.authn.pm.enabled=true
    
    #发送邮件
    spring.mail.host=smtp.qq.com
    spring.mail.port=465
    #邮箱用户名(qq账户)
    spring.mail.username=717350389@qq.com
    #邮箱授权码(qq授权码)
    spring.mail.password=zkyqtswrbqmhbbaa
    spring.mail.testConnection=false
    spring.mail.properties.mail.smtp.auth=true
    
    #必须ssl
    spring.mail.properties.mail.smtp.ssl.enable=true
    
    cas.authn.pm.reset.from=${spring.mail.username}
    #发送邮件标题
    cas.authn.pm.reset.subject=yellowcong.com 重置密码
    #邮件内容，必须要有%s，因为会生成一个连接并且带了token，否则无法打开链接，当然这个链接也和cas.server.prefix有关系
    cas.authn.pm.reset.text=打开以下链接重置您的密码（yellowcong.com）: %s
    #token失效分钟数
    cas.authn.pm.reset.expirationMinutes=10
    cas.authn.pm.reset.emailAttribute=mail
    
    #新密码必须匹配表达式
    cas.authn.pm.policyPattern=\\w{
       6,24}
    
    
    #邮箱查找
    #根据用户名查找邮箱
    cas.authn.pm.jdbc.sqlFindEmail=SELECT email FROM cas_auth_user WHERE user_name = ?
    #修改密码
    cas.authn.pm.jdbc.sqlChangePassword=update cas_auth_user set password=? where user_name=?
    cas.authn.pm.jdbc.url=${cas.authn.jdbc.query[0].url}
    cas.authn.pm.jdbc.user=${cas.authn.jdbc.query[0].user}
    cas.authn.pm.jdbc.password=${cas.authn.jdbc.query[0].password}
    cas.authn.pm.jdbc.dialect=${cas.authn.jdbc.query[0].dialect}
    cas.authn.pm.jdbc.driverClass=${cas.authn.jdbc.query[0].driverClass}
    #密码修改加密规则，这个必须要和原始密码加密规则一致
    cas.authn.pm.jdbc.passwordEncoder.type=${cas.authn.jdbc.query[0].passwordEncoder.type}
    cas.authn.pm.jdbc.passwordEncoder.characterEncoding=${cas.authn.jdbc.query[0].passwordEncoder.characterEncoding}
    cas.authn.pm.jdbc.passwordEncoder.encodingAlgorithm=${cas.authn.jdbc.query[0].passwordEncoder.encodingAlgorithm}
    cas.authn.pm.jdbc.passwordEncoder.secret=${cas.authn.jdbc.query[0].passwordEncoder.secret}
    #默认是false，不会提交update语句
    cas.authn.pm.jdbc.autocommit=true
    
    #是否开启问题回答(我关闭的，不想做问题)
    cas.authn.pm.reset.securityQuestionsEnabled=false
    #根据用户名查找问题
    cas.authn.pm.jdbc.sqlSecurityQuestions=select question, answer from sys_user_question where username=?
    
    #密码管理 结束

### 设置问题找回密码（这步我没有做） ###

另外可能会怀疑为什么会有那些问题，因为在sso-server/src/main/resources/profile/dev/sql/data-dev.sql加入了以下数据

INSERT INTO SYS_USER_QUESTION VALUES ('admin', '使用过的密码是？', '123');
    INSERT INTO SYS_USER_QUESTION VALUES ('admin', '你的年龄是？', '24');
    INSERT INTO SYS_USER_QUESTION VALUES ('zhangsan', '我的名字是？', 'zhangsan');
    INSERT INTO SYS_USER_QUESTION VALUES ('zhangsan', '我在哪里工作？', 'guangzhou');

## 4、测试登录 ##

可以看到，俺收到密码修改的连接了。  
![这里写图片描述][SouthEast 4]

## 常见问题 ##

### 1、org.apereo.cas.pm.web.flow.actions.SendPasswordResetInstructionsAction\] - `<No recipient is provided>` ###

![这里写图片描述][SouthEast 5]

导致这个问题的原因，是没有加入邮箱的依赖，导致找不到邮件信息的

<dependency>
      <groupId>org.apereo.cas</groupId>
      <artifactId>cas-server-support-pm-jdbc</artifactId>
      <version>${cas.version}</version>
    </dependency>

### 2Authentication failed; nested exception is javax.mail.AuthenticationFailedException: 535 Error: ###

导致这个问题，是由于我们的邮箱账户和密码不对，密码是通过qq的web端生成的授权码，而不是直接用qq密码  
  
![这里写图片描述][SouthEast 6]

## 参考文章 ##

[https://blog.csdn.net/u010475041/article/details/78249293][https_blog.csdn.net_u010475041_article_details_78249293]  
[https://apereo.github.io/cas/5.1.x/installation/Configuration-Properties.html\#password-management][https_apereo.github.io_cas_5.1.x_installation_Configuration-Properties.html_password-management]  
[https://mailhelp.aliyun.com/freemail/detail.vm?knoId=5869705][https_mailhelp.aliyun.com_freemail_detail.vm_knoId_5869705]  
[http://service.exmail.qq.com/cgi-bin/help?subtype=1&&id=28&&no=1000564][http_service.exmail.qq.com_cgi-bin_help_subtype_1_id_28_no_1000564]

[https_mail.qq.com]: https://mail.qq.com/
[SouthEast]: /images/20220528/535feea449ad4ee48dc2714b4aca6606.png
[SouthEast 1]: /images/20220528/1b2c0ca75dc6492895a437dbc201af9c.png
[SouthEast 2]: /images/20220528/dddfad41df48457cabf906ca84dde2c7.png
[SouthEast 3]: /images/20220528/81f4660e54ec4e6b8b1d80384cda0ce7.png
[SouthEast 4]: /images/20220528/688d2cce0a69498f827a061f2bf6907d.png
[SouthEast 5]: /images/20220528/eb28aa12169d45ee8486f89eab824651.png
[SouthEast 6]: /images/20220528/3607595855024616b14d3bbb3aaa209d.png
[https_blog.csdn.net_u010475041_article_details_78249293]: https://blog.csdn.net/u010475041/article/details/78249293
[https_apereo.github.io_cas_5.1.x_installation_Configuration-Properties.html_password-management]: https://apereo.github.io/cas/5.1.x/installation/Configuration-Properties.html#password-management
[https_mailhelp.aliyun.com_freemail_detail.vm_knoId_5869705]: https://mailhelp.aliyun.com/freemail/detail.vm?knoId=5869705
[http_service.exmail.qq.com_cgi-bin_help_subtype_1_id_28_no_1000564]: http://service.exmail.qq.com/cgi-bin/help?subtype=1&&id=28&&no=1000564