統(tǒng)一sso登錄

統(tǒng)一登錄sso已經(jīng)是很常用的技術(shù)了吨灭，方便多個(gè)系統(tǒng)共享登錄聂受，客戶端配置說明扮饶。
引入cas-client的jar包

      <dependency>
            <groupId>org.jasig.cas.client</groupId>
            <artifactId>cas-client-core</artifactId>
            <version>3.2.1</version>
        </dependency>

配置web.xml

 <!-- 字符串逗鸣，放在sso前面 -->
    <filter>
        <filter-name>encodingFilter</filter-name>
        <filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>
        <init-param>
            <param-name>encoding</param-name>
            <param-value>UTF-8</param-value>
        </init-param>
        <init-param>
            <param-name>forceEncoding</param-name>
            <param-value>true</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>encodingFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

<!-- sso start  ,本地不能運(yùn)行時(shí)枝嘶，請(qǐng)注釋掉sso攔截配置
        serverName 指的是本地地址信息
        sso 指定是遠(yuǎn)程登錄sso地址
        ssoValidateFilter 加入encoding=UTF-8防止出現(xiàn)無法解析web.xml情況 -->
    <listener>
        <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
    </listener>

    <filter>
        <filter-name>ssoSingOutFilter</filter-name>
        <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>ssoSingOutFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

    <filter>
        <filter-name>ssoAuthFilter</filter-name>
        <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
        <init-param>
            <param-name>casServerLoginUrl</param-name>
            <param-value> 
                http://ip:post/sso/login
            </param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value>
                http://localhost:8088
            </param-value>
        </init-param>
    </filter>
    
    <filter-mapping>
        <filter-name>ssoAuthFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    
    <filter>
        <filter-name>ssoValidateFilter</filter-name>
        <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter
        </filter-class>
        <init-param>
            <param-name>casServerUrlPrefix</param-name>
            <param-value>
                http://ip:port/sso
            </param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value> 
                http://localhost:8088
            </param-value>
        </init-param>
        <init-param>  
            <param-name>encoding</param-name>  
            <param-value>UTF-8</param-value>  
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>ssoValidateFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <!-- 
         AttributePrincipal principal = (AttributePrincipal) getRequest().getUserPrincipal();
        if(principal != null){
            String account = principal.getName().trim();// 登錄賬號(hào)   
                 }
     -->
    <filter>
        <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
        <filter-class>
          org.jasig.cas.client.util.HttpServletRequestWrapperFilter
        </filter-class>
     </filter>
     <filter-mapping>
        <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
        <url-pattern>/*</url-pattern>
     </filter-mapping>

   <!-- 該過濾器使得開發(fā)者可以通過org.jasig.cas.client.util.AssertionHolder來獲取用戶的登錄名帘饶。 
                比如AssertionHolder.getAssertion().getPrincipal().getName()。 -->
    <filter>
        <filter-name>CAS Assertion Thread Local Filter</filter-name>
        <filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>CAS Assertion Thread Local Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

    <!-- sso end -->