Cas單點登入(6)Cas Client配置

1、建立項目

建立javaEE項目CasClient，添加jar包cas-client-core-3.2.1.jar

2、修改web.xml

向javaEE項目的WEB-INF/web.xml添加以下代碼

<!-- ======================== 單點登入開始 ======================== -->
<!-- 該過濾器用于實作單點登出功能，可選配置。 -->
<filter>
        <filter-name>CAS Single Sign Out Filter</filter-name>
        <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
</filter>

    <!-- 該過濾器負責使用者的認證工作，必須啟用它 -->
<filter>
        <filter-name>CAS Authentication Filter</filter-name>
        <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
        <init-param>
            <param-name>casServerLoginUrl</param-name>
            <param-value>http://Cas Server的ip:端口号/cas/login</param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value>http://client伺服器ip:端口号</param-value>
        </init-param>
</filter>

    <!-- 該過濾器負責對Ticket的校驗工作，必須啟用它 -->
<filter>
        <filter-name>CAS Validation Filter</filter-name>
        <filter-class>org.jasig.cas.client.validation.Cas10TicketValidationFilter</filter-class>
        <init-param>
            <param-name>casServerUrlPrefix</param-name>
            <param-value>http://Cas Server的ip:端口号/cas</param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value>http://client伺服器ip:端口号</param-value>
        </init-param>
        <init-param>
            <param-name>redirectAfterValidation</param-name>
            <param-value>true</param-value>
        </init-param>
</filter>

<!-- 該過濾器負責實作HttpServletRequest請求的包裹， 比如允許開發者通過HttpServletRequest的getRemoteUser()方法獲得SSO登入使用者的登入名，可選配置。 -->
<filter>
        <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
        <filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>
</filter>

<!-- 該過濾器使得開發者可以通過org.jasig.cas.client.util.AssertionHolder來擷取使用者的登入名。 比如AssertionHolder.getAssertion().getPrincipal().getName()。 -->
<filter>
        <filter-name>CAS Assertion Thread Local Filter</filter-name>
        <filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filter-class>
</filter>

<filter-mapping>
        <filter-name>CAS Single Sign Out Filter</filter-name>
        <url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
        <filter-name>CAS Authentication Filter</filter-name>
        <url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
        <filter-name>CAS Validation Filter</filter-name>
        <url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
        <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
        <url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
        <filter-name>CAS Assertion Thread Local Filter</filter-name>
        <url-pattern>/*</url-pattern>
</filter-mapping>

<!-- ======================== 單點登入結束 ======================== -->

<!-- 所有 filter 結束後添加 logout 的 listener -->
<!-- 用于單點退出 -->
<listener>
        <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
</listener>           

3、測試

1. 啟動Cas Server所在Tomcat；
2. 将項目CasClient放入各自對應的Client伺服器中後，啟動三個Client伺服器所在Tomcat；
3. 輸入任意Client對應的網址：http://client伺服器ip:端口号/CasClient，若自動跳轉至Cas Server登入頁面，賬号密碼輸入成功後跳轉回Client頁面。再輸入其他任意Client對應網址後，免登陸直接顯示Client頁面，則說明配置成功。