cas 单点登录修改认证方式 jeesite

雨点打透心脏的1/2处 2022-06-14 01:44 153阅读 0赞

本文借鉴[单点登录CAS系列第04节][CAS_04]

首先我们要将cas导入到myeclipse中，具体方法（自己创建项目，gradle转），我用的第一个方法，创建web项目后，将编译后的文件拷贝到项目中，目录一定要正确哦，

如图：![20170401145359993][]![20170401145406883][]

1、`CSA`的默认登录用户密码配置在`deployerConfigContext.xml`，所以就到deployerConfigContext.xml里面找

可以找到`<bean id="primaryAuthenticationHandler" class="org.jasig...AcceptUsersAuthenticationHandler">`

我们在AcceptUsersAuthenticationHandler.[Java][]中发现CAS是把配置的用户密码读取到全局`Map<String, String>`中的

2、而AcceptUsersAuthenticationHandler.java是通过继承AbstractUsernamePasswordAuthenticationHandler.java才实现的认证

所以创建com.jadyer.sso.authentication.UserAuthenticationHandler extends AbstractUsernamePasswordAuthenticationHandler

再重写authenticateUsernamePasswordInternal()方法，在里面获取到前台页面输入的用户密码，再到[数据库][Link 1]中校验就行了。

3、接下来创建`\WEB-INF\spring-configuration\applicationContext-datasource.xml`

它会在启动时被自动加载（web.xml中设定的）

然后在里面配置数据库连接池，连接池的用户名密码等可以配置在`\WEB-INF\cas.properties`

同时增加`<context:component-scan base-package="com.jadyer.sso"/>`，使得可以在自定义类中应用Spring注解

4、新建一个UserDaoJdbc.java类，通过它利用SpringJDBCTemplate访问数据库

因为要连接数据库，所以还要把druid  jar包以及[MySQL][Link 1]\-connector-java  jar包加入到lib目录中

5、最后记得`deployerConfigContext.xml`里面把这段Bean配置给注释掉`<bean id="primaryAuthenticationHandler">`

并在自定义的`UserAuthenticationHandler.java`中使用`@Component(value="primaryAuthenticationHandler")`声明其为Bean

注意其名字应该是primaryAuthenticationHandler，因为deployerConfigContext.xml的其它配置引用了primaryAuthenticationHandler

否则你还要找到引用了primaryAuthenticationHandler的位置修改为新的Bean

下面我们来具体的执行：

1、认证类UserAuthenticationHandler.java

**\[html\]**  view plain  copy

print ?

1.  package authentication;  
2.  import java.security.GeneralSecurityException;  
3.  import javax.annotation.Resource;  
4.  import javax.security.auth.login.FailedLoginException;  
5.  import org.jasig.cas.authentication.HandlerResult;  
6.  import org.jasig.cas.authentication.PreventedException;  
7.  import org.jasig.cas.authentication.UsernamePasswordCredential;  
8.  import org.jasig.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler;  
9.  import org.jasig.cas.authentication.principal.SimplePrincipal;  
10. import org.springframework.stereotype.Component;  
11.   
12. /\*\*  
13.  \* 自定义的用户登录认证类  
14.  \*/  
15. @Component(value="primaryAuthenticationHandler")  
16. public class UserAuthenticationHandler extends AbstractUsernamePasswordAuthenticationHandler \{  
17.     @Resource  
18.     private UserDaoJdbc userDaoJdbc;  
19.   
20.     @Override  
21.     protected HandlerResult authenticateUsernamePasswordInternal(UsernamePasswordCredential transformedCredential) throws GeneralSecurityException, PreventedException \{  
22.         //UsernamePasswordCredential参数包含了前台页面输入的用户信息  
23.         String username = transformedCredential.getUsername();  
24.         String password = transformedCredential.getPassword();  
25.         //认证用户名和密码是否正确  
26.         if(userDaoJdbc.verifyAccount(username, password))\{  
27.             return createHandlerResult(transformedCredential, new SimplePrincipal(username), null);  
28.         \}  
29.         throw new FailedLoginException();  
30.     \}  
31. \}

package authentication;
    import java.security.GeneralSecurityException;
    import javax.annotation.Resource;
    import javax.security.auth.login.FailedLoginException;
    import org.jasig.cas.authentication.HandlerResult;
    import org.jasig.cas.authentication.PreventedException;
    import org.jasig.cas.authentication.UsernamePasswordCredential;
    import org.jasig.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler;
    import org.jasig.cas.authentication.principal.SimplePrincipal;
    import org.springframework.stereotype.Component;
    
    /**
     * 自定义的用户登录认证类
     */
    @Component(value="primaryAuthenticationHandler")
    public class UserAuthenticationHandler extends AbstractUsernamePasswordAuthenticationHandler {
        @Resource
        private UserDaoJdbc userDaoJdbc;
    
        @Override
        protected HandlerResult authenticateUsernamePasswordInternal(UsernamePasswordCredential transformedCredential) throws GeneralSecurityException, PreventedException {
            //UsernamePasswordCredential参数包含了前台页面输入的用户信息
            String username = transformedCredential.getUsername();
            String password = transformedCredential.getPassword();
            //认证用户名和密码是否正确
            if(userDaoJdbc.verifyAccount(username, password)){
                return createHandlerResult(transformedCredential, new SimplePrincipal(username), null);
            }
            throw new FailedLoginException();
        }
    }

2、密码校验类UserDaoJdbc.java，为了符合jeesite中的认证方式，将jeesite的解密方法拿过来

**\[html\]**  view plain  copy

print ?

1.  package authentication;  
2.  import javax.annotation.Resource;  
3.  import javax.sql.DataSource;  
4.  import org.springframework.dao.EmptyResultDataAccessException;  
5.  import org.springframework.jdbc.core.JdbcTemplate;  
6.  import org.springframework.stereotype.Repository;  
7.    
8.    
9.  @Repository  
10. public class UserDaoJdbc \{  
11.     private static final String SQL\_VERIFY\_ACCOUNT = "SELECT COUNT(\*) FROM sys\_user  WHERE login\_name=?  AND del\_flag=0";  
12.     private static final String SQL\_VERIFY\_PASSWORD = "SELECT password FROM sys\_user  WHERE login\_name=?  AND del\_flag=0";  
13.     private JdbcTemplate jdbcTemplate;  
14.     public static final int HASH\_INTERATIONS = 1024;  
15.     @Resource  
16.     public void setDataSource(DataSource dataSource)\{  
17.         this.jdbcTemplate = new JdbcTemplate(dataSource);  
18.     \}  
19.     public boolean verifyAccount(String username, String plainPassword)\{  
20.         try\{  
21.             //验证用户名和密码是否正确  
22.             if(1==this.jdbcTemplate.queryForObject(SQL\_VERIFY\_ACCOUNT, new Object\[\]\{username\}, Integer.class))\{  
23.                 String password =this.jdbcTemplate.queryForObject(SQL\_VERIFY\_PASSWORD,  new Object\[\]\{username\},String.class);  
24.                 String plain = Encodes.unescapeHtml(plainPassword);  
25.                 byte\[\] salt = Encodes.decodeHex(password.substring(0,16));  
26.                 byte\[\] hashPassword = Digests.sha1(plain.getBytes(), salt, HASH\_INTERATIONS);  
27.                 return password.equals(Encodes.encodeHex(salt)+Encodes.encodeHex(hashPassword));  
28.             \}  
29.             return false;  
30.           
31.         \}catch(EmptyResultDataAccessException e)\{  
32.             return false;  
33.         \}  
34.     \}  
35. \}

package authentication;
    import javax.annotation.Resource;
    import javax.sql.DataSource;
    import org.springframework.dao.EmptyResultDataAccessException;
    import org.springframework.jdbc.core.JdbcTemplate;
    import org.springframework.stereotype.Repository;
    
    
    @Repository
    public class UserDaoJdbc {
        private static final String SQL_VERIFY_ACCOUNT = "SELECT COUNT(*) FROM sys_user  WHERE login_name=?  AND del_flag=0";
        private static final String SQL_VERIFY_PASSWORD = "SELECT password FROM sys_user  WHERE login_name=?  AND del_flag=0";
        private JdbcTemplate jdbcTemplate;
        public static final int HASH_INTERATIONS = 1024;
        @Resource
        public void setDataSource(DataSource dataSource){
            this.jdbcTemplate = new JdbcTemplate(dataSource);
        }
        public boolean verifyAccount(String username, String plainPassword){
            try{
                //验证用户名和密码是否正确
                if(1==this.jdbcTemplate.queryForObject(SQL_VERIFY_ACCOUNT, new Object[]{username}, Integer.class)){
                	String password =this.jdbcTemplate.queryForObject(SQL_VERIFY_PASSWORD,  new Object[]{username},String.class);
                	String plain = Encodes.unescapeHtml(plainPassword);
            		byte[] salt = Encodes.decodeHex(password.substring(0,16));
            		byte[] hashPassword = Digests.sha1(plain.getBytes(), salt, HASH_INTERATIONS);
            		return password.equals(Encodes.encodeHex(salt)+Encodes.encodeHex(hashPassword));
                }
                return false;
            
            }catch(EmptyResultDataAccessException e){
                return false;
            }
        }
    }

3、链接数据库的配置文件spring-configuration\\applicationContext-datasource.xml

**\[html\]**  view plain  copy

print ?

1.  <?xml version="1.0" encoding="UTF-8"?>  
2.  <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:tx="http://www.springframework.org/schema/tx" xmlns:context="http://www.springframework.org/schema/context" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.2.xsd http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.2.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.2.xsd">  
3.      <bean id="dataSource" class="com.alibaba.druid.pool.DruidDataSource" init-method="init" destroy-method="close">  
4.          <property name="url" value="jdbc:mysql://"/>  
5.          <property name="username" value=""/>  
6.          <property name="password" value=""/>  
7.            
8.          <property name="initialSize" value="1"/>  
9.          <property name="minIdle" value="1"/>  
10.         <property name="maxActive" value="20"/>  
11.           
12.         <property name="maxWait" value="60000"/>  
13.           
14.         <property name="timeBetweenEvictionRunsMillis" value="60000"/>  
15.           
16.         <property name="minEvictableIdleTimeMillis" value="300000"/>  
17.         <property name="validationQuery" value="SELECT 'x'"/>  
18.         <property name="testWhileIdle" value="true"/>  
19.         <property name="testOnBorrow" value="false"/>  
20.         <property name="testOnReturn" value="false"/>  
21.           
22.           
23.         <property name="poolPreparedStatements" value="false"/>  
24.         <property name="maxPoolPreparedStatementPerConnectionSize" value="-1"/>  
25.           
26.         <property name="filters" value="wall,mergeStat"/>  
27.     </bean>  
28.     <bean id="txManager" class="org.springframework.jdbc.datasource.DataSourceTransactionManager">  
29.         <property name="dataSource" ref="dataSource"/>  
30.     </bean>  
31.     <tx:annotation-driven transaction-manager="txManager"/>  
32.   
33.     <context:component-scan base-package="authentication"/>  
34. </beans>

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:tx="http://www.springframework.org/schema/tx" xmlns:context="http://www.springframework.org/schema/context" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.2.xsd http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.2.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.2.xsd">
        <bean id="dataSource" class="com.alibaba.druid.pool.DruidDataSource" init-method="init" destroy-method="close">
            <property name="url" value="jdbc:mysql://"/>
            <property name="username" value=""/>
            <property name="password" value=""/>
            
            <property name="initialSize" value="1"/>
            <property name="minIdle" value="1"/>
            <property name="maxActive" value="20"/>
            
            <property name="maxWait" value="60000"/>
            
            <property name="timeBetweenEvictionRunsMillis" value="60000"/>
            
            <property name="minEvictableIdleTimeMillis" value="300000"/>
            <property name="validationQuery" value="SELECT 'x'"/>
            <property name="testWhileIdle" value="true"/>
            <property name="testOnBorrow" value="false"/>
            <property name="testOnReturn" value="false"/>
            
            
            <property name="poolPreparedStatements" value="false"/>
            <property name="maxPoolPreparedStatementPerConnectionSize" value="-1"/>
            
            <property name="filters" value="wall,mergeStat"/>
        </bean>
        <bean id="txManager" class="org.springframework.jdbc.datasource.DataSourceTransactionManager">
            <property name="dataSource" ref="dataSource"/>
        </bean>
        <tx:annotation-driven transaction-manager="txManager"/>
    
        <context:component-scan base-package="authentication"/>
    </beans>

4、修改cas的认证方法。新添信息，以前的可以注释掉

**\[html\]**  view plain  copy

print ?

1.  <bean id="authenticationManager" class="org.jasig.cas.authentication.PolicyBasedAuthenticationManager">  
2.      <constructor-arg>  
3.          <map>  
4.              <entry key-ref="proxyAuthenticationHandler" value-ref="proxyPrincipalResolver" />  
5.              <entry key-ref="primaryAuthenticationHandler" value-ref="primaryPrincipalResolver" />  
6.                
7.                
10.         </map>  
11.     </constructor-arg>  
12.     <property name="authenticationPolicy">  
13.         <bean class="org.jasig.cas.authentication.AnyAuthenticationPolicy" />  
14.     </property>  
15. </bean>  
16.

至此完毕，重启系统，使用项目中的用户登录。

[CAS_04]: https://jadyer.github.io/2015/07/18/sso-cas-login-db/
[20170401145359993]: https://img-blog.csdn.net/20170401145359993
[20170401145406883]: /images/20220614/e491843f97a54850891581940f189d2b.png
[Java]: http://lib.csdn.net/base/java
[Link 1]: http://lib.csdn.net/base/mysql