![\"menu-r.4af5f7ec.gif\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418100251-6802234baba0b.gif\")
<\/p>\n \u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90，\u70b9\u51fb\u83b7\u53d6 <\/p>\n
\u7b80\u4ecb：CAS（Central Authentication Service）\u662f\u57fa\u4e8eWeb\u7684\u5355\u4e00\u767b\u5f55（SSO）\u534f\u8bae，\u7528\u4e8e\u63d0\u4f9b\u7f51\u7edc\u4e0a\u7684\u7edf\u4e00\u8ba4\u8bc1\u670d\u52a1\u3002\u672c\u6587\u4ecb\u7ecd\u7684"cas-client-3.2.1+cas-server-3.4.10"\u7ec4\u5408\u6d89\u53caCAS\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u7684\u7279\u5b9a\u7248\u672c\u3002\u5305\u62ec\u5ba2\u6237\u7aef\u7279\u6027\u5982\u534f\u8bae\u652f\u6301\u3001\u81ea\u52a8\u914d\u7f6e\u3001\u767b\u5f55\/\u9000\u51fa\u5904\u7406\u3001\u5b89\u5168\u589e\u5f3a\u4ee5\u53ca\u591a\u8bed\u8a00\u652f\u6301\u3002\u670d\u52a1\u5668\u7aef\u529f\u80fd\u5982\u96c6\u4e2d\u5f0f\u8ba4\u8bc1\u3001\u591a\u56e0\u7d20\u8ba4\u8bc1\u3001\u670d\u52a1\u7ba1\u7406\u3001\u5ba1\u8ba1\u65e5\u5fd7\u548c\u4e2a\u6027\u5316\u914d\u7f6e\u3002\u6587\u7ae0\u8fd8\u8ba8\u8bba\u4e86\u96c6\u6210\u4e0e\u90e8\u7f72\u3001\u5355\u70b9\u767b\u51fa\u3001\u5b89\u5168\u6027\u3001\u76d1\u63a7\u4e0e\u7ef4\u62a4，\u4ee5\u53ca\u7248\u672c\u517c\u5bb9\u6027\u7684\u91cd\u8981\u6027\u3002\u6574\u4f53\u4e0a，\u8be5\u7ec4\u5408\u662f\u5b9e\u65bd\u7f51\u7edc\u5e94\u7528SSO\u8ba4\u8bc1\u7684\u5168\u9762\u89e3\u51b3\u65b9\u6848，\u6db5\u76d6\u914d\u7f6e\u3001\u5b89\u5168\u6027\u3001\u7528\u6237\u4f53\u9a8c\u548c\u7cfb\u7edf\u7ef4\u62a4\u7b49\u5173\u952e\u65b9\u9762\u3002 ![\"cas-client-3.2.1+cas-server-3.4.10\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418100251-6802234bb34db.png\")
<\/p>\n
\u5355\u4e00\u767b\u5f55\u534f\u8bae（Single Sign-On，\u7b80\u79f0SSO）\u662f\u4e00\u79cd\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u673a\u5236，\u5b83\u5141\u8bb8\u7528\u6237\u5728\u591a\u4e2a\u5e94\u7528\u7cfb\u7edf\u4e2d\u53ea\u9700\u8981\u8fdb\u884c\u4e00\u6b21\u767b\u5f55\u64cd\u4f5c，\u5373\u53ef\u8bbf\u95ee\u6240\u6709\u6388\u6743\u7684\u7cfb\u7edf\u3002CAS（Central Authentication Service）\u662f\u5176\u4e2d\u4e00\u79cd\u5e7f\u6cdb\u4f7f\u7528\u7684SSO\u534f\u8bae\u3002\u5176\u91cd\u8981\u6027\u5728\u4e8e\u7b80\u5316\u7528\u6237\u64cd\u4f5c，\u63d0\u9ad8\u5b89\u5168\u6027，\u65b9\u4fbf\u7ba1\u7406\u5458\u7ba1\u7406\u7528\u6237\u6743\u9650\u3002 <\/p>\n
CAS\u534f\u8bae\u5de5\u4f5c\u539f\u7406\u4e3b\u8981\u5206\u4e3a\u8ba4\u8bc1（\u767b\u5f55）\u548c\u670d\u52a1\u6388\u6743（\u8bbf\u95ee）\u4e24\u4e2a\u9636\u6bb5\u3002\u7528\u6237\u9996\u6b21\u8bbf\u95ee\u5e94\u7528\u7cfb\u7edf\u65f6，\u7cfb\u7edf\u91cd\u5b9a\u5411\u5230CAS\u670d\u52a1\u5668\u8fdb\u884c\u767b\u5f55；\u7528\u6237\u767b\u5f55\u6210\u529f\u540e，CAS\u670d\u52a1\u5668\u5c06\u7968\u636e\u53d1\u653e\u7ed9\u5e94\u7528\u7cfb\u7edf，\u5e94\u7528\u7cfb\u7edf\u51ed\u7968\u636e\u5141\u8bb8\u7528\u6237\u8bbf\u95ee\u3002 <\/p>\n
CAS\u7684\u4e3b\u8981\u4f18\u52bf\u662f\u964d\u4f4e\u4e86\u7528\u6237\u7684\u767b\u5f55\u8d1f\u62c5，\u7edf\u4e00\u4e86\u8eab\u4efd\u9a8c\u8bc1\u6d41\u7a0b，\u63d0\u9ad8\u4e86\u7cfb\u7edf\u7684\u5b89\u5168\u6027\u3002\u5b83\u5e7f\u6cdb\u5e94\u7528\u4e8e\u6559\u80b2\u3001\u4f01\u4e1a\u3001\u653f\u5e9c\u7b49\u9700\u8981\u8de8\u57df\u8ba4\u8bc1\u7684\u573a\u666f，\u5df2\u6210\u4e3a\u4e1a\u754c\u5e7f\u6cdb\u63a5\u53d7\u7684\u6807\u51c6\u89e3\u51b3\u65b9\u6848\u3002 <\/p>\n
\/\/ CAS\u767b\u5f55\u6d41\u7a0b\u56fe\u793a\u4f8b
\n+—————-+ +————-+ +—————-+
\n| \u7528\u6237\u6d4f\u89c8\u5668 | | \u5e94\u7528\u7cfb\u7edf | | CAS\u670d\u52a1\u5668 |
\n+—————-+ +————-+ +—————-+
\n | | |
\n |—\u8bf7\u6c42\u8bbf\u95ee\u5e94\u7528\u7cfb\u7edf->| |
\n | |—\u91cd\u5b9a\u5411\u81f3CAS\u767b\u5f55\u9875\u9762->|
\n |<–\u663e\u793aCAS\u767b\u5f55\u9875\u9762—| |
\n |—\u63d0\u4ea4\u767b\u5f55\u4fe1\u606f——>| |
\n | |—\u9a8c\u8bc1\u767b\u5f55\u4fe1\u606f——–>|
\n | |<–\u7968\u636e\u53d1\u653e————|
\n |<–\u91cd\u5b9a\u5411\u81f3\u5e94\u7528\u7cfb\u7edf–| |
\n |—\u643a\u5e26\u7968\u636e\u8bf7\u6c42\u8bbf\u95ee–>| |
\n | |—\u9a8c\u8bc1\u7968\u636e————>|
\n | |<–\u5141\u8bb8\u8bbf\u95ee————|
\n |—\u4eab\u53d7\u670d\u52a1———<| |
\n | | |<\/p>\n
CAS\u5ba2\u6237\u7aef\u8d1f\u8d23\u4e0eCAS\u670d\u52a1\u5668\u8fdb\u884c\u4ea4\u4e91，\u5b8c\u6210\u7528\u6237\u8ba4\u8bc1\u548c\u7968\u636e\u9a8c\u8bc1\u7684\u5904\u7406\u3002\u7248\u672c3.2.1\u5728\u539f\u6709\u529f\u80fd\u7684\u57fa\u7840\u4e0a，\u65b0\u589e\u4e86\u8bf8\u5982\u591a\u56e0\u7d20\u8ba4\u8bc1\u652f\u6301\u3001SSO\u4f1a\u8bdd\u7ba1\u7406\u7b49\u3002\u5ba2\u6237\u7aef\u901a\u8fc7\u5404\u79cd\u8ba4\u8bc1\u65b9\u5f0f，\u5982\u7528\u6237\u540d\u5bc6\u7801\u3001\u77ed\u4fe1\u9a8c\u8bc1\u7801\u7b49，\u4e0e\u670d\u52a1\u5668\u7aef\u7684CAS\u8ba4\u8bc1\u670d\u52a1\u8fdb\u884c\u901a\u4fe1，\u83b7\u53d6\u7968\u636e（Ticket Granting Ticket, TGT）\u548c\u670d\u52a1\u7968\u636e（Service Ticket, ST）\u3002\u8fd9\u4e9b\u7968\u636e\u662f\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u5668\u7aef\u5728\u7528\u6237\u4f1a\u8bdd\u671f\u95f4\u5efa\u7acb\u4fe1\u4efb\u7684\u5173\u952e\u3002 <\/p>\n
CAS\u5ba2\u6237\u7aef3.2.1\u91c7\u7528\u4e86\u6a21\u5757\u5316\u8bbe\u8ba1，\u4ee5\u4fbf\u4e8e\u6269\u5c55\u548c\u7ef4\u62a4\u3002\u5b83\u4e3b\u8981\u7531\u4ee5\u4e0b\u51e0\u4e2a\u6838\u5fc3\u7ec4\u4ef6\u6784\u6210： – \u8ba4\u8bc1\u5904\u7406\u5668 ：\u5904\u7406\u6765\u81ea\u7528\u6237\u7684\u8ba4\u8bc1\u8bf7\u6c42，\u4e0e\u670d\u52a1\u5668\u7aef\u8fdb\u884c\u7968\u636e\u4ea4\u6362\u3002 – \u7968\u636e\u9a8c\u8bc1\u5668 ：\u9a8c\u8bc1\u4ece\u670d\u52a1\u7aef\u8fd4\u56de\u7684\u670d\u52a1\u7968\u636e\u3002 – \u670d\u52a1\u7ba1\u7406\u5668 ：\u7ba1\u7406\u5e94\u7528\u4e2d\u5b9a\u4e49\u7684\u670d\u52a1\u548c\u4ed6\u4eec\u7684\u7968\u636e\u9a8c\u8bc1\u7b56\u7565\u3002 – \u914d\u7f6e\u7ba1\u7406\u5668 ：\u8d1f\u8d23\u52a0\u8f7d\u914d\u7f6e\u6587\u4ef6，\u5305\u62ec\u8ba4\u8bc1\u5904\u7406\u5668\u548c\u670d\u52a1\u7ba1\u7406\u5668\u7b49\u7ec4\u4ef6\u7684\u914d\u7f6e\u3002 <\/p>\n
\u5728\u5b89\u5168\u65b9\u9762，3.2.1\u7248\u672c\u7740\u91cd\u4e8e\u589e\u5f3a\u8ba4\u8bc1\u673a\u5236\u7684\u5b89\u5168\u6027\u3002\u4f8b\u5982： – \u7968\u636e\u52a0\u5bc6 ：\u652f\u6301\u5bf9\u7968\u636e\u8fdb\u884c\u52a0\u5bc6，\u589e\u52a0\u4e86\u7968\u636e\u4f20\u8f93\u8fc7\u7a0b\u7684\u5b89\u5168\u6027\u3002 – \u591a\u56e0\u7d20\u8ba4\u8bc1 ：\u96c6\u6210\u591a\u56e0\u7d20\u8ba4\u8bc1\u6a21\u5757，\u53ef\u4ee5\u4e0e\u591a\u79cd\u7c7b\u578b\u7684\u7b2c\u4e8c\u56e0\u7d20\u8ba4\u8bc1\u7ed3\u5408，\u5982\u77ed\u4fe1\u3001\u90ae\u4ef6\u9a8c\u8bc1\u7801\u7b49\u3002 <\/p>\n
\u6027\u80fd\u65b9\u9762，CAS\u5ba2\u6237\u7aef3.2.1\u7248\u672c\u5f15\u5165\u4e86\u65b0\u7684\u7f13\u5b58\u7b56\u7565\u548c\u7968\u636e\u5904\u7406\u4f18\u5316： – \u7968\u636e\u7f13\u5b58 ：\u5bf9\u7968\u636e\u8fdb\u884c\u6709\u6548\u7f13\u5b58，\u51cf\u5c11\u5bf9CAS\u670d\u52a1\u5668\u7684\u8ba4\u8bc1\u8bf7\u6c42\u6b21\u6570\u3002 – \u5e76\u53d1\u5904\u7406 ：\u4f18\u5316\u4e86\u5e76\u53d1\u8bf7\u6c42\u7684\u5904\u7406\u65b9\u5f0f，\u63d0\u9ad8\u4e86\u9ad8\u5e76\u53d1\u4e0b\u7684\u54cd\u5e94\u901f\u5ea6\u3002 <\/p>\n
\u5b89\u88c5CAS\u5ba2\u6237\u7aef\u76f8\u5bf9\u7b80\u5355，\u901a\u5e38\u5305\u62ec\u4ee5\u4e0b\u6b65\u9aa4： 1. \u4e0b\u8f7d\u5bf9\u5e94\u7248\u672c\u7684CAS\u5ba2\u6237\u7aef\u5b89\u88c5\u5305\u3002 2. \u89e3\u538b\u5b89\u88c5\u5305\u5230\u6307\u5b9a\u7684\u76ee\u5f55\u3002 3. \u914d\u7f6e\u5ba2\u6237\u7aef\u7684 cas.properties \u6587\u4ef6，\u5305\u62ecCAS\u670d\u52a1\u5668\u5730\u5740\u3001\u8ba4\u8bc1\u65b9\u5f0f\u7b49\u3002 4. \u914d\u7f6e\u4e0eWeb\u670d\u52a1\u5668\u7684\u96c6\u6210（\u4f8b\u5982，\u4f7f\u7528Tomcat\u65f6，\u914d\u7f6e web.xml ）\u3002 <\/p>\n
cas.properties \u6587\u4ef6\u662f\u5ba2\u6237\u7aef\u914d\u7f6e\u7684\u6838\u5fc3\u6587\u4ef6，\u5305\u542b\u4e86\u5404\u79cd\u5173\u952e\u914d\u7f6e\u9879，\u5982： – cas.server.url.prefix ：CAS\u670d\u52a1\u5668\u7684\u57fa\u7840URL\u3002 – cas.client.host.url ：\u5ba2\u6237\u7aef\u81ea\u8eab\u7684URL\u3002 – cas.authn.mfa.enabled ：\u662f\u5426\u542f\u7528\u591a\u56e0\u7d20\u8ba4\u8bc1\u3002 <\/p>\n
cas.server.url.prefix=***<\/p>\n
\u4ee5\u4e0a\u914d\u7f6e\u786e\u4fdd\u4e86\u5ba2\u6237\u7aef\u80fd\u591f\u6b63\u786e\u5730\u4e0eCAS\u670d\u52a1\u5668\u901a\u4fe1，\u5e76\u542f\u7528\u5fc5\u8981\u7684\u5b89\u5168\u7279\u6027\u3002 <\/p>\n
CAS\u670d\u52a1\u5668\u7684\u6838\u5fc3\u529f\u80fd\u4e4b\u4e00\u662f\u63d0\u4f9b\u4e00\u4e2a\u53ef\u9760\u7684\u8ba4\u8bc1\u4e0e\u6388\u6743\u673a\u5236，\u4ee5\u786e\u4fdd\u53ea\u6709\u7ecf\u8fc7\u9a8c\u8bc1\u7684\u7528\u6237\u624d\u80fd\u8bbf\u95ee\u7279\u5b9a\u670d\u52a1\u3002\u5728CAS 3.4.10\u7248\u672c\u4e2d，\u8ba4\u8bc1\u673a\u5236\u91c7\u7528\u4e86\u66f4\u4e3a\u5148\u8fdb\u7684\u6280\u672f，\u5982\u591a\u56e0\u7d20\u8ba4\u8bc1(MFA)\u7684\u96c6\u6210，\u5b83\u4e3a\u7528\u6237\u8bbf\u95ee\u63a7\u5236\u63d0\u4f9b\u4e86\u66f4\u9ad8\u7ea7\u522b\u7684\u5b89\u5168\u6027\u3002 <\/p>\n
\u8ba4\u8bc1\u8fc7\u7a0b\u6d89\u53ca\u5230\u7528\u6237\u8eab\u4efd\u7684\u6838\u5b9e，\u800c\u6388\u6743\u5219\u662f\u57fa\u4e8e\u8ba4\u8bc1\u7ed3\u679c\u6765\u51b3\u5b9a\u7528\u6237\u5bf9\u7279\u5b9a\u8d44\u6e90\u7684\u8bbf\u95ee\u6743\u9650\u3002CAS\u901a\u8fc7\u7edf\u4e00\u7684\u8ba4\u8bc1\u63a5\u53e3，\u5141\u8bb8\u7528\u6237\u4f7f\u7528\u5404\u79cd\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5，\u4f8b\u5982\u7528\u6237\u540d\u548c\u5bc6\u7801\u3001OAuth\u3001SAML\u7b49，\u4ece\u800c\u8bbf\u95ee\u4e0d\u540c\u7684\u670d\u52a1\u3002 <\/p>\n
\u6b64\u5916，CAS 3.4.10\u7248\u672c\u65b0\u589e\u4e86\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236(RBAC)\u529f\u80fd，\u5b83\u5141\u8bb8\u7ba1\u7406\u5458\u4e3a\u4e0d\u540c\u89d2\u8272\u7684\u7528\u6237\u5206\u914d\u4e0d\u540c\u7684\u8bbf\u95ee\u6743\u9650，\u786e\u4fdd\u4e86\u66f4\u52a0\u7cbe\u7ec6\u5316\u7684\u6743\u9650\u7ba1\u7406\u3002 <\/p>\n
\/\/ \u793a\u4f8b：\u7528\u6237\u8ba4\u8bc1\u4ee3\u7801\u7247\u6bb5
\npublic User authenticate(String username, String password) {
\n \/\/ \u68c0\u67e5\u7528\u6237\u540d\u548c\u5bc6\u7801\u662f\u5426\u5339\u914d
\n if (userService.isValidCredentials(username, password)) {
\n \/\/ \u5982\u679c\u5339\u914d，\u68c0\u7d22\u7528\u6237\u4fe1\u606f
\n User user = userService.getUserByUsername(username);
\n \/\/ \u8fdb\u884c\u6388\u6743\u68c0\u67e5
\n if (authorizationService.isAuthorized(user)) {
\n return user;
\n }
\n }
\n throw new AuthenticationException("Authentication failed.");
\n}<\/p>\n
\u5728\u4e0a\u8ff0Java\u4ee3\u7801\u4e2d，\u6211\u4eec\u9996\u5148\u68c0\u67e5\u7528\u6237\u540d\u548c\u5bc6\u7801\u662f\u5426\u6709\u6548\u3002\u5982\u679c\u6709\u6548，\u6211\u4eec\u68c0\u7d22\u7528\u6237\u5bf9\u8c61，\u5e76\u901a\u8fc7\u6388\u6743\u670d\u52a1\u68c0\u67e5\u8be5\u7528\u6237\u662f\u5426\u6709\u6743\u8fdb\u884c\u8ba4\u8bc1\u3002\u8fd9\u662f\u7b80\u5316\u7684\u903b\u8f91，\u5b9e\u9645\u4e2d\u5e94\u5305\u62ec\u66f4\u591a\u7684\u5b89\u5168\u8003\u8651\u548c\u5f02\u5e38\u5904\u7406\u3002 <\/p>\n
CAS\u670d\u52a1\u5668\u53e6\u4e00\u4e2a\u6838\u5fc3\u529f\u80fd\u662f\u670d\u52a1\u7ba1\u7406\u4e0e\u76d1\u63a7\u3002\u670d\u52a1\u7ba1\u7406\u5141\u8bb8\u7ba1\u7406\u5458\u6ce8\u518c\u548c\u914d\u7f6e\u9700\u8981\u4f7f\u7528CAS\u8fdb\u884c\u8ba4\u8bc1\u7684\u5ba2\u6237\u7aef\u5e94\u7528\u7a0b\u5e8f\u3002\u901a\u8fc7\u56fe\u5f62\u7528\u6237\u754c\u9762\u6216\u8005\u914d\u7f6e\u6587\u4ef6，\u7ba1\u7406\u5458\u53ef\u4ee5\u5b9a\u4e49\u670d\u52a1\u7684\u76f8\u5173\u53c2\u6570，\u5982\u670d\u52a1ID\u3001\u5bc6\u94a5\u4ee5\u53ca\u56de\u8c03URL\u7b49\u3002 <\/p>\n
\u76d1\u63a7\u65b9\u9762，CAS\u63d0\u4f9b\u4e86\u4e00\u7cfb\u5217\u7684\u76d1\u63a7\u5de5\u5177\u6765\u8ddf\u8e2a\u670d\u52a1\u5668\u7684\u8fd0\u884c\u72b6\u6001\u548c\u6027\u80fd\u6307\u6807\u3002\u7ba1\u7406\u5458\u53ef\u4ee5\u5b9e\u65f6\u67e5\u770b\u7cfb\u7edf\u65e5\u5fd7\u3001\u8ba4\u8bc1\u8bf7\u6c42\u91cf\u4ee5\u53ca\u54cd\u5e94\u65f6\u95f4\u7b49\u5173\u952e\u6307\u6807，\u8fd9\u5bf9\u4e8e\u53ca\u65f6\u53d1\u73b0\u6f5c\u5728\u7684\u95ee\u9898\u548c\u4f18\u5316\u7cfb\u7edf\u6027\u80fd\u81f3\u5173\u91cd\u8981\u3002 <\/p>\n
| \u529f\u80fd | \u63cf\u8ff0 | \u91cd\u8981\u6027 | |——|——|——–| | \u670d\u52a1\u6ce8\u518c | \u5141\u8bb8\u7ba1\u7406\u5458\u6dfb\u52a0\u3001\u4fee\u6539\u6216\u5220\u9664\u670d\u52a1\u8bb0\u5f55\u3002 | \u9ad8 | | \u670d\u52a1\u6388\u6743 | \u5b9a\u4e49\u54ea\u4e9b\u670d\u52a1\u53ef\u4ee5\u4f7f\u7528CAS\u8fdb\u884c\u8ba4\u8bc1\u3002 | \u9ad8 | | \u72b6\u6001\u68c0\u67e5 | \u63d0\u4f9b\u670d\u52a1\u8fd0\u884c\u72b6\u6001\u7684\u5feb\u7167\u3002 | \u4e2d | | \u6027\u80fd\u6307\u6807 | \u76d1\u63a7\u8ba4\u8bc1\u8bf7\u6c42\u91cf\u3001\u54cd\u5e94\u65f6\u95f4\u548c\u670d\u52a1\u5668\u8d1f\u8f7d\u7b49\u3002 | \u4e2d | | \u6545\u969c\u8bca\u65ad | \u6536\u96c6\u548c\u5c55\u793a\u7cfb\u7edf\u9519\u8bef\u4fe1\u606f，\u5e2e\u52a9\u5b9a\u4f4d\u95ee\u9898\u3002 | \u9ad8 | <\/p>\n
CAS 3.4.10\u7248\u672c\u5f15\u5165\u4e86\u4e00\u4e2a\u5168\u65b0\u7684\u7528\u6237\u754c\u9762，\u63d0\u4f9b\u4e86\u66f4\u73b0\u4ee3\u5316\u548c\u7528\u6237\u53cb\u597d\u7684\u4ea4\u4e92\u4f53\u9a8c\u3002\u65b0\u754c\u9762\u91c7\u7528\u4e86\u54cd\u5e94\u5f0f\u8bbe\u8ba1，\u517c\u5bb9\u5404\u79cd\u8bbe\u5907，\u5305\u62ec\u624b\u673a\u3001\u5e73\u677f\u548c\u684c\u9762\u6d4f\u89c8\u5668，\u4ece\u800c\u63d0\u9ad8\u4e86\u7528\u6237\u4f53\u9a8c\u3002 <\/p>\n
\u6539\u8fdb\u7684\u7528\u6237\u754c\u9762\u4e0d\u4ec5\u63d0\u5347\u4e86\u89c6\u89c9\u7f8e\u611f，\u8fd8\u4f18\u5316\u4e86\u7528\u6237\u64cd\u4f5c\u6d41\u7a0b\u3002\u6bd4\u5982，\u767b\u5f55\u6d41\u7a0b\u7ecf\u8fc7\u91cd\u65b0\u8bbe\u8ba1，\u51cf\u5c11\u4e86\u7528\u6237\u8f93\u5165\u4fe1\u606f\u7684\u6b65\u9aa4，\u7b80\u5316\u4e86\u591a\u56e0\u7d20\u8ba4\u8bc1\u8fc7\u7a0b，\u4ece\u800c\u964d\u4f4e\u4e86\u7528\u6237\u5b8c\u6210\u8ba4\u8bc1\u6240\u9700\u7684\u52aa\u529b\u3002 <\/p>\n
graph TD
\nA[\u5f00\u59cb\u767b\u5f55] –> B{\u8f93\u5165\u51ed\u8bc1}
\nB –>|\u51ed\u8bc1\u6b63\u786e| C[\u9009\u62e9\u8ba4\u8bc1\u65b9\u5f0f]
\nB –>|\u51ed\u8bc1\u9519\u8bef| D[\u663e\u793a\u9519\u8bef\u5e76\u91cd\u65b0\u8f93\u5165]
\nC –> E{\u9009\u62e9\u591a\u56e0\u7d20\u8ba4\u8bc1}
\nE –>|\u9009\u62e9\u77ed\u4fe1\u8ba4\u8bc1| F[\u8f93\u5165\u77ed\u4fe1\u9a8c\u8bc1\u7801]
\nE –>|\u9009\u62e9\u90ae\u7bb1\u8ba4\u8bc1| G[\u70b9\u51fb\u90ae\u7bb1\u4e2d\u7684\u9a8c\u8bc1\u94fe\u63a5]
\nF –> H[\u9a8c\u8bc1\u6210\u529f]
\nG –> H
\nD –> B<\/p>\n
CAS 3.4.10\u7248\u672c\u5728\u6269\u5c55\u6027\u548c\u96c6\u6210\u80fd\u529b\u4e0a\u4e5f\u505a\u4e86\u663e\u8457\u6539\u8fdb\u3002\u7cfb\u7edf\u65b0\u589e\u4e86\u63d2\u4ef6\u67b6\u6784，\u5141\u8bb8\u5f00\u53d1\u8005\u6dfb\u52a0\u81ea\u5b9a\u4e49\u529f\u80fd\u548c\u96c6\u6210\u7b2c\u4e09\u65b9\u670d\u52a1\u3002\u8fd9\u79cd\u8bbe\u8ba1\u4f7f\u5f97CAS\u53ef\u4ee5\u66f4\u5bb9\u6613\u5730\u9002\u5e94\u4e0d\u65ad\u53d8\u5316\u7684IT\u73af\u5883\u548c\u5b89\u5168\u9700\u6c42\u3002 <\/p>\n
\u6b64\u5916，CAS 3.4.10\u8fd8\u589e\u5f3a\u4e86\u4e0e\u5176\u4ed6\u8ba4\u8bc1\u534f\u8bae\u7684\u96c6\u6210\u80fd\u529b，\u6bd4\u5982\u652f\u6301\u4e86OAuth 2.0\u548cOpenID Connect\u7b49\u73b0\u4ee3\u8ba4\u8bc1\u534f\u8bae，\u4f7fCAS\u80fd\u591f\u66f4\u597d\u5730\u4e0e\u4e91\u670d\u52a1\u548cAPI\u4fdd\u62a4\u573a\u666f\u914d\u5408\u3002 <\/p>\n
\/\/ \u63d2\u4ef6\u67b6\u6784\u6269\u5c55\u70b9\u63a5\u53e3\u793a\u4f8b
\npublic interface CasPlugin {
\n void initialize();
\n void destroy();
\n \/\/ \u5176\u4ed6\u65b9\u6cd5\u53ef\u4ee5\u6839\u636e\u9700\u8981\u8fdb\u884c\u6269\u5c55
\n}<\/p>\n
\/\/ \u5b9e\u73b0\u63d2\u4ef6\u63a5\u53e3\u7684\u793a\u4f8b\u7c7b
\npublic class CustomPlugin implements CasPlugin {
\n @Override
\n public void initialize() {
\n \/\/ \u63d2\u4ef6\u521d\u59cb\u5316\u65f6\u6267\u884c\u7684\u64cd\u4f5c
\n }<\/p>\n
@Override
\n public void destroy() {
\n \/\/ \u63d2\u4ef6\u9500\u6bc1\u65f6\u6267\u884c\u7684\u64cd\u4f5c
\n }
\n}<\/p>\n
\u5728Java\u4ee3\u7801\u4e2d， CasPlugin \u662f\u4e00\u4e2a\u6269\u5c55\u70b9\u63a5\u53e3，\u4efb\u4f55\u5b9e\u73b0\u4e86\u8be5\u63a5\u53e3\u7684\u7c7b\u90fd\u53ef\u4ee5\u4f5c\u4e3aCAS\u7684\u63d2\u4ef6\u3002\u63d2\u4ef6\u53ef\u4ee5\u5728\u521d\u59cb\u5316\u65f6\u8fdb\u884c\u7279\u5b9a\u64cd\u4f5c，\u5e76\u5728\u9500\u6bc1\u65f6\u6e05\u7406\u8d44\u6e90\u3002 <\/p>\n
\u90e8\u7f72CAS\u670d\u52a1\u5668\u524d，\u9700\u8981\u8fdb\u884c\u5145\u5206\u7684\u51c6\u5907\u5de5\u4f5c\u3002\u9996\u5148，\u9700\u8981\u9009\u62e9\u5408\u9002\u7684\u786c\u4ef6\u548c\u64cd\u4f5c\u7cfb\u7edf\u73af\u5883，\u7136\u540e\u6839\u636e\u9700\u6c42\u914d\u7f6e\u7f51\u7edc\u8bbe\u7f6e，\u5982\u5206\u914d\u9759\u6001IP\u5730\u5740\u3001\u8bbe\u7f6e\u9632\u706b\u5899\u89c4\u5219\u4ee5\u53ca\u914d\u7f6e\u57df\u540d\u548cSSL\u8bc1\u4e66\u3002 <\/p>\n
\u7cfb\u7edf\u73af\u5883\u8981\u6c42\u5305\u62ecJava\u7248\u672c\u7684\u786e\u8ba4，\u56e0\u4e3aCAS\u662f\u57fa\u4e8eJava\u7684，\u6240\u4ee5\u9700\u8981\u5b89\u88c5\u652f\u6301\u7684Java\u7248\u672c\u3002\u6b64\u5916，\u8fd8\u9700\u8981\u8003\u8651\u5185\u5b58\u548c\u5b58\u50a8\u7a7a\u95f4\u7684\u5206\u914d，\u786e\u4fddCAS\u670d\u52a1\u5668\u5728\u9ad8\u8d1f\u8f7d\u4e0b\u4e5f\u80fd\u7a33\u5b9a\u8fd0\u884c\u3002 <\/p>\n
\u4ece\u65e7\u7248\u672c\u5347\u7ea7\u5230CAS 3.4.10\u9700\u8981\u7ec6\u81f4\u7684\u89c4\u5212\u548c\u6267\u884c\u3002\u5347\u7ea7\u4e4b\u524d\u5e94\u8be5\u5bf9\u73b0\u6709\u73af\u5883\u8fdb\u884c\u5907\u4efd，\u4ee5\u9632\u5347\u7ea7\u8fc7\u7a0b\u4e2d\u51fa\u73b0\u6570\u636e\u4e22\u5931\u6216\u8005\u7cfb\u7edf\u4e0d\u7a33\u5b9a\u7684\u60c5\u51b5\u3002 <\/p>\n
\u5347\u7ea7\u6b65\u9aa4\u5305\u62ec\u505c\u6b62\u5f53\u524d\u8fd0\u884c\u7684CAS\u670d\u52a1，\u4e0b\u8f7d\u5e76\u5b89\u88c5\u65b0\u7248\u672c\u7684CAS\u8f6f\u4ef6，\u7136\u540e\u8fdb\u884c\u76f8\u5e94\u7684\u914d\u7f6e\u3002\u5347\u7ea7\u540e\u9700\u8981\u8fdb\u884c\u6d4b\u8bd5，\u9a8c\u8bc1\u6240\u6709\u529f\u80fd\u662f\u5426\u6b63\u5e38\u5de5\u4f5c，\u5e76\u786e\u4fdd\u7b2c\u4e09\u65b9\u670d\u52a1\u96c6\u6210\u672a\u53d7\u5e72\u6270\u3002 <\/p>\n
\u672c\u7ae0\u8be6\u7ec6\u4ecb\u7ecd\u4e86CAS\u670d\u52a1\u56683.4.10\u7248\u672c\u7684\u6838\u5fc3\u529f\u80fd\u548c\u6539\u8fdb\u4eae\u70b9，\u5f3a\u8c03\u4e86\u8ba4\u8bc1\u548c\u6388\u6743\u673a\u5236\u4ee5\u53ca\u670d\u52a1\u7ba1\u7406\u4e0e\u76d1\u63a7\u7684\u91cd\u8981\u6027\u3002CAS 3.4.10\u7248\u672c\u7684\u7528\u6237\u754c\u9762\u548c\u4ea4\u4e92\u7ecf\u8fc7\u4f18\u5316，\u6269\u5c55\u6027\u548c\u96c6\u6210\u80fd\u529b\u4e5f\u5f97\u5230\u4e86\u589e\u5f3a\u3002\u90e8\u7f72\u4e0e\u5347\u7ea7\u65b9\u9762，\u672c\u7ae0\u63d0\u4f9b\u4e86\u5168\u9762\u7684\u51c6\u5907\u5de5\u4f5c\u6307\u5357\u548c\u5347\u7ea7\u6b65\u9aa4，\u786e\u4fdd\u7cfb\u7edf\u7ba1\u7406\u5458\u80fd\u591f\u987a\u5229\u5b8c\u6210\u5347\u7ea7\u3002 <\/p>\n
\u90e8\u7f72CAS\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u5668\u96c6\u6210\u4e4b\u524d，\u9996\u5148\u8981\u786e\u8ba4\u7cfb\u7edf\u73af\u5883\u662f\u5426\u7b26\u5408\u8981\u6c42\u3002\u5728\u4f01\u4e1a\u7ea7\u5e94\u7528\u4e2d，\u901a\u5e38\u4f1a\u6709\u8bb8\u591a\u4f9d\u8d56\u9879\u548c\u670d\u52a1，\u56e0\u6b64\u4e00\u4e2a\u660e\u786e\u7684\u73af\u5883\u6e05\u5355\u5bf9\u4e8e\u907f\u514d\u90e8\u7f72\u4e2d\u5e38\u89c1\u7684\u95ee\u9898\u81f3\u5173\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u57fa\u672c\u7684\u7cfb\u7edf\u73af\u5883\u8981\u6c42： <\/p>\n
\u5728\u96c6\u6210\u90e8\u7f72\u4e4b\u524d，\u9700\u8981\u786e\u4fdd\u6b63\u786e\u914d\u7f6e\u4e86\u6240\u6709\u5fc5\u9700\u7684\u7f51\u7edc\u7aef\u53e3\u548c\u670d\u52a1\u3002\u4e0b\u9762\u662f\u4e00\u4e2a\u7b80\u5355\u7684\u8868\u683c，\u63cf\u8ff0\u4e86\u5728\u670d\u52a1\u5668\u548c\u5ba2\u6237\u7aef\u4e0a\u53ef\u80fd\u9700\u8981\u5f00\u653e\u7684\u7aef\u53e3\u548c\u670d\u52a1： <\/p>\n
| \u7aef\u53e3\/\u670d\u52a1 | \u534f\u8bae | \u63cf\u8ff0 | |—————-|——|————————————| | 80\/443 | TCP | HTTP\/HTTPS\u670d\u52a1\u7aef\u53e3，\u4e3b\u8981\u7528\u4e8e\u5916\u90e8\u8bbf\u95ee| | 8443 | TCP | CAS\u670d\u52a1\u5668SSL\u7aef\u53e3 | | 8080 | TCP | \u5e94\u7528\u7a0b\u5e8f\u7aef\u53e3 | | 5554\/5555 | TCP | \u7aef\u53e3\u6620\u5c04（\u6839\u636e\u5177\u4f53\u90e8\u7f72\u60c5\u51b5） | | JNDI (1099\u7b49) | TCP | \u7528\u4e8eJava\u547d\u540d\u548c\u76ee\u5f55\u63a5\u53e3\u7684\u670d\u52a1 | | Kerberos | UDP | \u7528\u4e8e\u8ba4\u8bc1\u670d\u52a1（\u5982\u679c\u4f7f\u7528） | <\/p>\n
\u914d\u7f6e\u7aef\u53e3\u548c\u670d\u52a1\u65f6，\u9700\u8003\u8651\u9632\u706b\u5899\u548c\u5b89\u5168\u7ec4\u89c4\u5219，\u786e\u4fdd\u53ea\u6709\u5fc5\u8981\u7684\u7aef\u53e3\u5bf9\u5916\u5f00\u653e\u3002 <\/p>\n
\u914d\u7f6e\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u5668\u901a\u8baf\u6d89\u53ca\u4fee\u6539\u5ba2\u6237\u7aef\u7684\u914d\u7f6e\u6587\u4ef6，\u4ee5\u6b63\u786e\u6307\u5411CAS\u670d\u52a1\u5668\u7684\u4f4d\u7f6e\u3002\u4ee5\u4e0b\u662f\u914d\u7f6e\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u5668\u901a\u8baf\u7684\u57fa\u672c\u6b65\u9aa4： <\/p>\n
<!– \u4f8b\u5982\u5728Spring Security\u914d\u7f6e\u4e2d –>
\n<sec:authentication-manager>
\n <sec:authentication-provider>
\n <sec:password-encoder hash="plaintext"\/>
\n <sec:user-service id="casUserDetailsService"
\n user-cache-ref="userCache"
\n group-cache-ref="groupCache"
\n user-credentials-cache-ref="userCredentialsCache"
\n properties-ref="casProperties"
\n cache-ref="casUserDetailsCacheManager">
\n <sec:user name="casuser" password="casuser"
\n authorities="ROLE_USER" \/>
\n <\/sec:user-service>
\n <\/sec:authentication-provider>
\n<\/sec:authentication-manager><\/p>\n
<bean id="casProperties" class="org.springframework.beans.factory.config.PropertiesFactoryBean">
\n <property name="singleton" value="true"\/>
\n <property name="ignoreDependencyInterface" value="org.springframework.core.io.ResourceLoader"\/>
\n <property name="ignoreDependencyInterfaces">
\n <list>
\n <value>org.springframework.core.io.ResourceLoader<\/value>
\n <\/list>
\n <\/property>
\n <property name="locations">
\n <list>
\n <value>classpath:cas.properties<\/value>
\n <\/list>
\n <\/property>
\n<\/bean><\/p>\n
\u4ee3\u7406\u8bbe\u7f6e\u662f\u5ba2\u6237\u7aef\u914d\u7f6e\u7684\u5173\u952e\u90e8\u5206，\u5141\u8bb8\u5ba2\u6237\u7aef\u4f5c\u4e3aCAS\u670d\u52a1\u5411CAS\u670d\u52a1\u5668\u53d1\u9001\u8bf7\u6c42\u5e76\u5904\u7406\u54cd\u5e94\u3002\u8fd9\u901a\u5e38\u6d89\u53ca\u4ee5\u4e0b\u6b65\u9aa4： <\/p>\n
\/\/ \u4f8b\u5982，\u4f7f\u7528CAS Java Client Library\u65f6\u7684\u4f2a\u4ee3\u7801
\nCasClient casClient = new CasClient();
\ncasClient.setCasServerUrlPrefix("***");
\ncasClient.setCasServerLoginUrl("***");
\ncasClient.setServiceTicketValidator(new Cas20ServiceTicketValidator(casClient.getCasServerUrlPrefix()));<\/p>\n
\/\/ \u8bbe\u7f6e\u56de\u8c03\u5730\u5740
\ncasClient.setService("***");<\/p>\n
\/\/ \u5904\u7406\u7968\u636e
\nAuthenticationHandler authenticationHandler = new TicketValidatorAuthenticationHandler(casClient.getServiceTicketValidator());<\/p>\n
\u65e5\u5fd7\u5206\u6790\u662f\u5b9a\u4f4d\u548c\u89e3\u51b3\u90e8\u7f72\u95ee\u9898\u7684\u5173\u952e\u5de5\u5177\u3002\u5728\u914d\u7f6e\u4e86\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u901a\u8baf\u4e4b\u540e，\u4e00\u65e6\u51fa\u73b0\u95ee\u9898，\u5c31\u9700\u8981\u4f7f\u7528\u65e5\u5fd7\u6765\u8fdb\u884c\u95ee\u9898\u5b9a\u4f4d\u3002\u65e5\u5fd7\u8bb0\u5f55\u901a\u5e38\u5305\u542b\u4ee5\u4e0b\u51e0\u79cd： <\/p>\n
\/\/ \u4f8b\u5982，\u5728Spring Boot\u5e94\u7528\u4e2d\u914d\u7f6e\u65e5\u5fd7\u7ea7\u522b
\nlogging:
\n level:
\n org:
\n jasig:
\n cas: DEBUG<\/p>\n
\u5728\u8c03\u8bd5\u96c6\u6210\u90e8\u7f72\u7684\u95ee\u9898\u65f6，\u4e00\u4e9b\u5de5\u5177\u548c\u6280\u672f\u53ef\u4ee5\u63d0\u9ad8\u6548\u7387： <\/p>\n
# \u4f7f\u7528curl\u547d\u4ee4\u884c\u5de5\u5177\u6d4b\u8bd5CAS\u670d\u52a1\u7968\u636e\u9a8c\u8bc1
\ncurl -v –data "service=***" \\\\
\n ***<\/p>\n
\u5728\u8c03\u8bd5\u8fc7\u7a0b\u4e2d，\u52a1\u5fc5\u6ce8\u610f\u68c0\u67e5\u8fd4\u56de\u7684HTTP\u72b6\u6001\u7801\u548c\u54cd\u5e94\u4f53\u5185\u5bb9，\u4ee5\u786e\u4fdd\u7f51\u7edc\u8bf7\u6c42\u7684\u6b63\u786e\u6027\u3002\u6b64\u5916，\u7ef4\u62a4\u4e00\u4e2a\u901a\u7528\u7684\u95ee\u9898\u68c0\u67e5\u6e05\u5355\u5c06\u5e2e\u52a9\u4f60\u5feb\u901f\u5b9a\u4f4d\u548c\u89e3\u51b3\u5927\u90e8\u5206\u5e38\u89c1\u7684\u96c6\u6210\u90e8\u7f72\u95ee\u9898\u3002 <\/p>\n
\u5355\u70b9\u767b\u51fa（Single Sign-Out，SSO）\u662f\u5355\u70b9\u767b\u5f55（Single Sign-On，SSO）\u7684\u8865\u5145\u3002\u5b83\u786e\u4fdd\u5f53\u7528\u6237\u5728\u4e00\u4e2a\u5e94\u7528\u4e2d\u767b\u51fa\u65f6，\u4f1a\u8bdd\u5728\u6240\u6709\u5e94\u7528\u4e2d\u88ab\u7ec8\u6b62\u3002\u4e3a\u4e86\u5b9e\u73b0\u8fd9\u4e2a\u76ee\u6807，CAS\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u4e4b\u95f4\u7684\u4ea4\u4e92\u662f\u5173\u952e\u3002\u5728CAS\u534f\u8bae\u4e2d，\u5355\u70b9\u767b\u51fa\u901a\u5e38\u662f\u901a\u8fc7TGT（Ticket Granting Ticket）\u7684\u751f\u547d\u5468\u671f\u6765\u63a7\u5236\u7684\u3002\u7528\u6237\u9996\u5148\u767b\u5f55，\u7136\u540eCAS\u670d\u52a1\u5668\u53d1\u653e\u4e00\u4e2aTGT\u7ed9\u5ba2\u6237\u7aef，\u8fd9\u4e2aTGT\u53ef\u4ee5\u7528\u6765\u8bf7\u6c42ST（Service Ticket）\u6765\u8bbf\u95ee\u5404\u4e2a\u670d\u52a1\u3002\u5f53\u7528\u6237\u51b3\u5b9a\u767b\u51fa\u65f6，\u5ba2\u6237\u7aef\u4f1a\u901a\u77e5CAS\u670d\u52a1\u5668，CAS\u670d\u52a1\u5668\u968f\u540e\u4f1a\u9500\u6bc1TGT，\u5e76\u4e14\u53d1\u5e03\u767b\u51fa\u6d88\u606f\u7ed9\u6240\u6709\u5df2\u7ecf\u8ba4\u8bc1\u7684\u670d\u52a1，\u6307\u793a\u5b83\u4eec\u4e5f\u9500\u6bc1\u4e0e\u8be5TGT\u5173\u8054\u7684ST\u3002 <\/p>\n
\u8981\u5b9e\u73b0\u5355\u70b9\u767b\u51fa，CAS\u5ba2\u6237\u7aef\u5fc5\u987b\u80fd\u591f\u76d1\u542c\u767b\u51fa\u4e8b\u4ef6，\u5e76\u4e14\u80fd\u591f\u5411\u670d\u52a1\u5668\u53d1\u9001\u767b\u51fa\u8bf7\u6c42\u3002\u540c\u65f6，\u670d\u52a1\u5668\u7aef\u9700\u8981\u80fd\u591f\u5904\u7406\u8fd9\u4e9b\u8bf7\u6c42，\u5e76\u901a\u77e5\u6240\u6709\u6d3b\u8dc3\u7684\u670d\u52a1\u5b9e\u4f8b\u3002CAS\u4f7f\u7528\u4e00\u4e2a\u79f0\u4e3alogout URL\u7684\u56de\u8c03\u673a\u5236\u6765\u5b9e\u73b0\u8fd9\u4e00\u70b9，\u5f53\u7528\u6237\u5728\u4efb\u4e00\u670d\u52a1\u7aef\u70b9\u6267\u884c\u767b\u51fa\u64cd\u4f5c\u65f6，CAS\u670d\u52a1\u5668\u4f1a\u8c03\u7528\u6240\u6709\u670d\u52a1\u7684logout URL\u4ee5\u901a\u77e5\u5b83\u4eec\u7528\u6237\u5df2\u7ecf\u767b\u51fa\u3002 <\/p>\n
\u5b89\u5168\u6027\u662f\u5b9e\u73b0\u5355\u70b9\u767b\u51fa\u65f6\u9700\u8981\u8003\u8651\u7684\u4e00\u4e2a\u91cd\u8981\u56e0\u7d20\u3002\u7531\u4e8e\u5355\u70b9\u767b\u51fa\u6d89\u53ca\u591a\u4e2a\u7cfb\u7edf\u548c\u670d\u52a1\u4e4b\u95f4\u7684\u4ea4\u4e92，\u56e0\u6b64\u5fc5\u987b\u786e\u4fdd\u6574\u4e2a\u6d41\u7a0b\u4e0d\u4f1a\u53d7\u5230\u6076\u610f\u7528\u6237\u5229\u7528\u3002\u4f8b\u5982，\u4e00\u4e2a\u6076\u610f\u7528\u6237\u53ef\u80fd\u8bd5\u56fe\u4f2a\u9020\u767b\u51fa\u8bf7\u6c42，\u5bfc\u81f4\u5176\u4ed6\u7528\u6237\u7684\u4f1a\u8bdd\u88ab\u4e0d\u6b63\u5f53\u7ec8\u6b62\u3002\u4e3a\u4e86\u9632\u6b62\u8fd9\u79cd\u60c5\u51b5，CAS\u534f\u8bae\u901a\u8fc7\u4f7f\u7528\u7968\u636e（Ticket）\u6765\u786e\u4fdd\u6d88\u606f\u7684\u6765\u6e90\u662f\u5408\u6cd5\u7684\u3002TGT\u548cST\u90fd\u5305\u542b\u6709\u7279\u5b9a\u7684\u52a0\u5bc6\u7b7e\u540d，\u670d\u52a1\u5728\u5904\u7406\u7968\u636e\u65f6\u4f1a\u9a8c\u8bc1\u8fd9\u4e9b\u7b7e\u540d，\u786e\u4fdd\u5b83\u4eec\u662f\u7531CAS\u670d\u52a1\u5668\u7b7e\u53d1\u7684\u3002 <\/p>\n
\u53e6\u5916，\u767b\u51fa\u8bf7\u6c42\u5e94\u8be5\u901a\u8fc7\u5b89\u5168\u7684HTTPS\u8fde\u63a5\u53d1\u9001，\u4ee5\u9632\u6b62\u4e2d\u95f4\u4eba\u653b\u51fb\u3002\u5728\u670d\u52a1\u7aef，logout URL\u56de\u8c03\u5e94\u5f53\u901a\u8fc7\u67d0\u79cd\u5f62\u5f0f\u7684\u8ba4\u8bc1\u673a\u5236，\u5982OAuth，\u6765\u9a8c\u8bc1\u56de\u8c03\u7684\u5408\u6cd5\u6027\u548c\u6765\u6e90\u3002\u6b64\u5916，\u5f53\u7528\u6237\u767b\u51fa\u65f6，\u5e94\u786e\u4fdd\u6e05\u9664\u6240\u6709\u76f8\u5173\u7684\u8ba4\u8bc1\u4fe1\u606f，\u5982cookies\u3001\u4ee4\u724c\u548c\u4f1a\u8bdd\u6570\u636e，\u907f\u514d\u7528\u6237\u4fe1\u606f\u88ab\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u3002 <\/p>\n
\u4e3a\u4e86\u5b9e\u73b0\u5355\u70b9\u767b\u51fa，\u9996\u5148\u9700\u8981\u786e\u4fdd\u6240\u6709\u670d\u52a1\u5171\u4eab\u540c\u4e00\u7528\u6237session\u3002\u8fd9\u901a\u5e38\u901a\u8fc7\u5206\u5e03\u5f0fsession\u7ba1\u7406\u5b9e\u73b0，\u5404\u4e2a\u670d\u52a1\u53ef\u4ee5\u8bbf\u95ee\u5230\u5b58\u50a8\u5728\u670d\u52a1\u5668\u7aef\u7684session\u6570\u636e\u3002\u5728CAS\u73af\u5883\u4e0b，session\u6570\u636e\u901a\u5e38\u4e0eTGT\u7ed1\u5b9a，\u5e76\u4e14\u5b58\u50a8\u5728CAS\u670d\u52a1\u5668\u4e0a\u3002 <\/p>\n
\u5f53\u7528\u6237\u6267\u884c\u767b\u51fa\u64cd\u4f5c\u65f6，CAS\u670d\u52a1\u5668\u9996\u5148\u4f1a\u9500\u6bc1\u4e0e\u7528\u6237\u4f1a\u8bdd\u76f8\u5173\u7684TGT\u3002\u7136\u540e，CAS\u901a\u77e5\u6240\u6709\u670d\u52a1\u8fdb\u884csession\u9500\u6bc1\u3002\u670d\u52a1\u7aef\u63a5\u6536\u5230\u767b\u51fa\u8bf7\u6c42\u540e，\u4f1a\u67e5\u627e\u5e76\u6e05\u9664\u6240\u6709\u4e0e\u8be5TGT\u76f8\u5173\u7684session\u6570\u636e\u3002\u5728\u5206\u5e03\u5f0f\u7cfb\u7edf\u4e2d，session\u6570\u636e\u53ef\u80fd\u88ab\u7f13\u5b58\u6216\u590d\u5236\u5230\u591a\u4e2a\u8282\u70b9\u4e0a，\u56e0\u6b64\u786e\u4fdd\u6240\u6709\u8282\u70b9\u4e0a\u7684session\u6570\u636e\u88ab\u6e05\u9664\u662f\u4e00\u9879\u6311\u6218\u3002 <\/p>\n
\u6280\u672f\u5b9e\u73b0\u4e0a，\u53ef\u4ee5\u4f7f\u7528\u4e00\u4e9b\u6210\u719f\u7684\u5206\u5e03\u5f0f\u7f13\u5b58\u89e3\u51b3\u65b9\u6848，\u5982Redis\u6216Memcached，\u8fd9\u4e9b\u7cfb\u7edf\u652f\u6301\u4e8b\u4ef6\u76d1\u542c\u548c\u6570\u636e\u5e7f\u64ad\u529f\u80fd，\u80fd\u591f\u6709\u6548\u5730\u5728\u6240\u6709\u8282\u70b9\u95f4\u540c\u6b65session\u9500\u6bc1\u6d88\u606f\u3002\u670d\u52a1\u7aef\u7684\u5355\u70b9\u767b\u51fa\u5904\u7406\u903b\u8f91\u5e94\u5f53\u8ba2\u9605\u8fd9\u4e9b\u6d88\u606f，\u5e76\u5728\u63a5\u6536\u5230\u6d88\u606f\u540e\u7acb\u5373\u6267\u884c\u672c\u5730session\u6e05\u9664\u64cd\u4f5c\u3002 <\/p>\n
\u5728\u5355\u70b9\u767b\u51fa\u673a\u5236\u4e2d，\u670d\u52a1\u7aef\u901a\u77e5\u673a\u5236\u662f\u786e\u4fdd\u6240\u6709\u670d\u52a1\u5b9e\u4f8b\u5747\u54cd\u5e94\u767b\u51fa\u64cd\u4f5c\u7684\u5173\u952e\u3002\u8be5\u673a\u5236\u9700\u8981\u4fdd\u8bc1： <\/p>\n
\u4e00\u79cd\u5e38\u89c1\u7684\u5b9e\u73b0\u65b9\u5f0f\u662f\u4f7f\u7528\u56de\u8c03URL\u3002\u670d\u52a1\u7aef\u5728\u7528\u6237\u767b\u5f55\u65f6\u8bb0\u5f55\u4e0b\u670d\u52a1\u5b9e\u4f8b\u7684\u56de\u8c03URL，\u5f53\u7528\u6237\u767b\u51fa\u65f6，CAS\u670d\u52a1\u5668\u4f1a\u5411\u8fd9\u4e9bURL\u53d1\u9001\u767b\u51fa\u901a\u77e5\u3002\u670d\u52a1\u5b9e\u4f8b\u9700\u8981\u5b9e\u73b0\u8fd9\u4e2a\u56de\u8c03，\u4ee5\u4fbf\u5728\u6536\u5230\u901a\u77e5\u540e\u6267\u884c\u767b\u51fa\u903b\u8f91\u3002 <\/p>\n
\u5728\u5b9e\u73b0\u56de\u8c03\u903b\u8f91\u65f6，\u670d\u52a1\u7aef\u4ee3\u7801\u9700\u8981\u80fd\u591f\u533a\u5206\u6b63\u5e38\u7684\u8bf7\u6c42\u548c\u7531CAS\u53d1\u9001\u7684\u767b\u51fa\u8bf7\u6c42\u3002\u901a\u5e38\u4f1a\u4f7f\u7528\u7279\u5b9a\u7684Header\u6216\u8005Query Parameter\u6765\u6807\u8bc6\u8fd9\u4e9b\u8bf7\u6c42\u3002\u670d\u52a1\u5b9e\u4f8b\u5728\u63a5\u6536\u5230\u8bf7\u6c42\u540e，\u5e94\u8fdb\u884c\u9a8c\u8bc1，\u7136\u540e\u6e05\u9664\u4e0e\u7528\u6237\u76f8\u5173\u7684\u4f1a\u8bdd\u6570\u636e\u3002 <\/p>\n
\u8bbe\u60f3\u6709\u4e00\u4e2a\u7531\u591a\u4e2aWeb\u5e94\u7528\u7ec4\u6210\u7684\u5728\u7ebf\u6559\u80b2\u5e73\u53f0，\u8fd9\u4e9b\u5e94\u7528\u9700\u8981\u4f7f\u7528CAS\u534f\u8bae\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u548c\u5355\u70b9\u767b\u5f55\u3002\u73b0\u5728，\u8be5\u5e73\u53f0\u9700\u8981\u5b9e\u73b0\u5355\u70b9\u767b\u51fa\u529f\u80fd，\u4ee5\u4fbf\u5f53\u7528\u6237\u5728\u5e73\u53f0\u7684\u4efb\u4e00\u5e94\u7528\u4e2d\u767b\u51fa\u65f6，\u6240\u6709\u5e94\u7528\u4e2d\u7684\u7528\u6237\u4f1a\u8bdd\u90fd\u4f1a\u88ab\u6b63\u786e\u7ec8\u6b62\u3002 <\/p>\n
\u9996\u5148，\u5728CAS\u670d\u52a1\u5668\u7aef，\u9700\u8981\u5728 cas.properties \u914d\u7f6e\u6587\u4ef6\u4e2d\u6307\u5b9a\u767b\u5f55\u548c\u767b\u51fa\u7684\u56de\u8c03URL： <\/p>\n
cas.serviceRegistry.initFromJson=true
\ncas.serviceRegistry.jsonFilegetLocation=classpath:\/services.json<\/p>\n
cas.logout.followServiceRedirects=true
\ncas.logout.removeDescendantTickets=true<\/p>\n
\u7136\u540e，\u4e3a\u6bcf\u4e2aWeb\u5e94\u7528\u914d\u7f6e\u76f8\u5e94\u7684 web.xml \u4ee5\u63a5\u6536CAS\u7684\u767b\u51fa\u8bf7\u6c42： <\/p>\n
<web-app>
\n <listener>
\n <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener<\/listener-class>
\n <\/listener>
\n <filter>
\n <filter-name>CAS Single Sign Out Filter<\/filter-name>
\n <filter-class>org.jasig.cas.client.session.SingleSignOutFilter<\/filter-class>
\n <init-param>
\n <param-name>casServerUrlPrefix<\/param-name>
\n <param-value>***<\/param-value>
\n <\/init-param>
\n <\/filter>
\n <filter-mapping>
\n <filter-name>CAS Single Sign Out Filter<\/filter-name>
\n <url-pattern>\/*<\/url-pattern>
\n <\/filter-mapping>
\n<\/web-app><\/p>\n
\u63a5\u4e0b\u6765，\u5728\u6bcf\u4e2a\u670d\u52a1\u7aef\u70b9\u6dfb\u52a0\u4e00\u4e2a\u767b\u51fa\u5904\u7406\u7684Servlet： <\/p>\n
@WebServlet(urlPatterns="\/logout\/cas")
\npublic class CustomLogoutServlet extends HttpServlet {
\n protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
\n String ticket = request.getParameter("ticket");
\n \/\/ \u5904\u7406\u767b\u51fa\u903b\u8f91，\u4f8b\u5982\u6e05\u9664\u672c\u5730\u4f1a\u8bdd\u6570\u636e
\n }
\n}<\/p>\n
\u6700\u540e，\u901a\u8fc7\u6d4b\u8bd5\u786e\u4fdd\u6574\u4e2a\u6d41\u7a0b\u6b63\u5e38\u5de5\u4f5c\u3002\u5728\u7528\u6237\u767b\u5f55\u540e，\u8fdb\u5165\u4efb\u4f55\u4e00\u4e2a\u5e94\u7528\u5e76\u6267\u884c\u767b\u51fa\u64cd\u4f5c，\u89c2\u5bdf\u5176\u4ed6\u5e94\u7528\u662f\u5426\u4e5f\u88ab\u6b63\u786e\u767b\u51fa，\u68c0\u67e5\u76f8\u5173\u65e5\u5fd7\u786e\u8ba4\u56de\u8c03URL\u88ab\u6210\u529f\u8c03\u7528，\u5e76\u4e14\u4f1a\u8bdd\u6570\u636e\u88ab\u6e05\u9664\u3002 <\/p>\n
\u901a\u8fc7\u4e0a\u8ff0\u914d\u7f6e\u548c\u6d4b\u8bd5，\u53ef\u4ee5\u9a8c\u8bc1\u5355\u70b9\u767b\u51fa\u529f\u80fd\u5728\u5e73\u53f0\u4e0a\u7684\u5b9e\u73b0\u60c5\u51b5\u3002\u8fd9\u4e0d\u4ec5\u589e\u5f3a\u4e86\u7528\u6237\u4f53\u9a8c，\u4e5f\u52a0\u5f3a\u4e86\u7cfb\u7edf\u7684\u5b89\u5168\u6027\u3002 <\/p>\n
\u5728CAS（Central Authentication Service）\u73af\u5883\u4e2d，\u8ba4\u8bc1\u5b89\u5168\u662f\u6784\u5efa\u6574\u4e2a\u5b89\u5168\u67b6\u6784\u7684\u57fa\u77f3\u3002\u52a0\u56fa\u8ba4\u8bc1\u5b89\u5168\u7684\u63aa\u65bd\u5305\u62ec： <\/p>\n
\u5728CAS\u914d\u7f6e\u4e2d，\u52a0\u5bc6\u548c\u5bc6\u94a5\u7ba1\u7406\u540c\u6837\u91cd\u8981，\u4ee5\u4e0b\u662f\u4e00\u4e9b\u5b9e\u7528\u7684\u5efa\u8bae： <\/p>\n
\u4e3a\u4e86\u786e\u4fddCAS\u670d\u52a1\u5668\u5728\u9ad8\u8d1f\u8f7d\u4e0b\u4ecd\u80fd\u4fdd\u6301\u826f\u597d\u7684\u6027\u80fd，\u8fdb\u884c\u6027\u80fd\u6d4b\u8bd5\u548c\u76d1\u63a7\u662f\u5fc5\u4e0d\u53ef\u5c11\u7684\u6b65\u9aa4： <\/p>\n
\u5e38\u89c1\u7684\u6027\u80fd\u74f6\u9888\u53ca\u89e3\u51b3\u7b56\u7565\u5305\u62ec： <\/p>\n
\u65e5\u5fd7\u8bb0\u5f55\u5bf9\u4e8e\u7cfb\u7edf\u7ef4\u62a4\u548c\u95ee\u9898\u8bca\u65ad\u81f3\u5173\u91cd\u8981： <\/p>\n
\u6700\u540e，\u4e3a\u4e86\u786e\u4fddCAS\u670d\u52a1\u5668\u7684\u7a33\u5b9a\u8fd0\u884c，\u9700\u8981\u5236\u5b9a\u4e00\u4e2a\u8be6\u7ec6\u7684\u5b9a\u671f\u7ef4\u62a4\u8ba1\u5212： <\/p>\n
\u901a\u8fc7\u8fd9\u4e9b\u7b56\u7565\u548c\u8ba1\u5212\u7684\u5b9e\u65bd，\u53ef\u4ee5\u786e\u4fddCAS\u7cfb\u7edf\u7684\u5b89\u5168\u6027\u548c\u9ad8\u6548\u8fd0\u884c，\u4e3a\u7528\u6237\u63d0\u4f9b\u7a33\u5b9a\u53ef\u9760\u7684\u767b\u5f55\u670d\u52a1\u3002 <\/p>\n
\u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90，\u70b9\u51fb\u83b7\u53d6 <\/p>\n
\u7b80\u4ecb：CAS（Central Authentication Service）\u662f\u57fa\u4e8eWeb\u7684\u5355\u4e00\u767b\u5f55（SSO）\u534f\u8bae，\u7528\u4e8e\u63d0\u4f9b\u7f51\u7edc\u4e0a\u7684\u7edf\u4e00\u8ba4\u8bc1\u670d\u52a1\u3002\u672c\u6587\u4ecb\u7ecd\u7684"cas-client-3.2.1+cas-server-3.4.10"\u7ec4\u5408\u6d89\u53caCAS\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u7684\u7279\u5b9a\u7248\u672c\u3002\u5305\u62ec\u5ba2\u6237\u7aef\u7279\u6027\u5982\u534f\u8bae\u652f\u6301\u3001\u81ea\u52a8\u914d\u7f6e\u3001\u767b\u5f55\/\u9000\u51fa\u5904\u7406\u3001\u5b89\u5168\u589e\u5f3a\u4ee5\u53ca\u591a\u8bed\u8a00\u652f\u6301\u3002\u670d\u52a1\u5668\u7aef\u529f\u80fd\u5982\u96c6\u4e2d\u5f0f\u8ba4\u8bc1\u3001\u591a\u56e0\u7d20\u8ba4\u8bc1\u3001\u670d\u52a1\u7ba1\u7406\u3001\u5ba1\u8ba1\u65e5\u5fd7\u548c\u4e2a\u6027\u5316\u914d\u7f6e\u3002\u6587\u7ae0\u8fd8\u8ba8\u8bba\u4e86\u96c6\u6210\u4e0e\u90e8\u7f72\u3001\u5355\u70b9\u767b\u51fa\u3001\u5b89\u5168\u6027\u3001\u76d1\u63a7\u4e0e\u7ef4\u62a4，\u4ee5\u53ca\u7248\u672c\u517c\u5bb9\u6027\u7684\u91cd\u8981\u6027\u3002\u6574\u4f53\u4e0a，\u8be5\u7ec4\u5408\u662f\u5b9e\u65bd\u7f51\u7edc\u5e94\u7528SSO\u8ba4\u8bc1\u7684\u5168\u9762\u89e3\u51b3\u65b9\u6848，\u6db5\u76d6\u914d\u7f6e\u3001\u5b89\u5168\u6027\u3001\u7528\u6237\u4f53\u9a8c\u548c\u7cfb\u7edf\u7ef4\u62a4\u7b49\u5173\u952e\u65b9\u9762\u3002 <\/p>\n
\u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90，\u70b9\u51fb\u83b7\u53d6 <\/p>\n","protected":false},"excerpt":{"rendered":"
\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb1.4k\u6b21\uff0c\u70b9\u8d5e13\u6b21\uff0c\u6536\u85cf30\u6b21\u3002\u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90\uff0c\u70b9\u51fb\u83b7\u53d6 \u7b80\u4ecb\uff1aCAS\uff08Central Authentication Service\uff09\u662f\u57fa\u4e8eWeb\u7684\u5355\u4e00\u767b\u5f55\uff08SSO\uff09\u534f\u8bae\uff0c\u7528\u4e8e\u63d0\u4f9b\u7f51\u7edc\u4e0a\u7684\u7edf\u4e00\u8ba4\u8bc1\u670d\u52a1\u3002\u672c\u6587\u4ecb\u7ecd\u7684"cas-client-3.2.1+cas-server-3.4.10"\u7ec4\u5408\u6d89\u53caCAS\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u7684\u7279\u5b9a\u7248\u672c\u3002\u5305\u62ec\u5ba2\u6237\u7aef\u7279\u6027\u5982\u534f\u8bae\u652f\u6301\u3001\u81ea\u52a8\u914d\u7f6e\u3001\u767b\u5f55\/\u9000\u51fa\u5904\u7406\u3001\u5b89\u5168\u589e\u5f3a\u4ee5\u53ca\u591a\u8bed\u8a00\u652f\u6301\u3002…_cas\u534f\u8bae<\/p>\n","protected":false},"author":2,"featured_media":10535,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"topic":[],"class_list":["post-10537","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server"],"yoast_head":"\n