Změny dokumentu CAS Java klient
Naposledy změněno Petr Abrahamczik 16.04.2024 10:22
Od verze 13.1
změnil(a) Petr Abrahamczik
k 07.02.2019 13:43
k 07.02.2019 13:43
Změnit komentář:
Žádné komentáře k této verzi
Na verzi 10.1
změnil(a) Petr Abrahamczik
k 07.02.2019 11:11
k 07.02.2019 11:11
Změnit komentář:
Žádné komentáře k této verzi
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -1,4 +1,4 @@ 1 -V ukázkovém příkladu je popsán z ákladní způsob konfigurace webové aplikace v Javě pomocí [[Java Apereo CAS Client>>https://github.com/apereo/java-cas-client]].Aplikace je schopna získat přihlášeného uživatele pomocí CAS v3 protokolu.1 +V ukázkovém příkladu je popsán způsob konfigurace webové aplikace v Javě pomocí [[Java Apereo CAS Client>>https://github.com/apereo/java-cas-client]]. 2 2 3 3 1. Do aplikace je potřeba přidat knihovny klienta https://mvnrepository.com/artifact/org.jasig.cas.client/cas-client-core buď přímo a nebo pomocí nějakého buildovacího nástroje např. Maven.((( 4 4 {{code language="xml"}} ... ... @@ -9,9 +9,7 @@ 9 9 </dependency> 10 10 {{/code}} 11 11 ))) 12 -1. Nakonfigurovat ##web.xml##. V uvedené konfiguraci je nutné nahradit adresu klienta https://klient.vsb.cz s URL našeho serveru. V mapování filtru ##CAS Authentication Filter## je možné uvést místo ##/*## kontext do chráněné zóny aplikace např.((( 13 -/private/* 14 - 12 +1. Nakonfigurovat web.xml. V uvedené konfiguraci je nutné nahradit adresu klienta https://klient.vsb.cz s URL našeho serveru.((( 15 15 {{code language="xml"}} 16 16 <filter> 17 17 <filter-name>CAS Single Sign Out Filter</filter-name> ... ... @@ -87,80 +87,9 @@ 87 87 <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class> 88 88 </listener> 89 89 {{/code}} 90 - 91 -(% class="box" %) 92 -((( 93 -(% class="code" %) 94 -((( 95 -(% style="color:#008000; font-weight:bold" %)##**<filter>**##(%%)## 96 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Single Sign Out Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 97 - (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.session.SingleSignOutFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 98 - (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 99 - (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)casServerUrlPrefix(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 100 - (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/www.sso.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 101 - (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 102 -(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 103 -\\(% style="color:#008000; font-weight:bold" %)**<filter>**(%%) 104 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Authentication Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 105 - (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.authentication.AuthenticationFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 106 - (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 107 - (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)casServerUrlPrefix(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 108 - (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/www.sso.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 109 - (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 110 - (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 111 - (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)serverName(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 112 - (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/klient.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 113 - (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 114 -(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 115 - 116 -(% style="color:#008000; font-weight:bold" %)**<filter>**(%%) 117 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Validation Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 118 - (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.validation.Cas30ProxyReceivingTicketValidationFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 119 - (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 120 - (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)casServerUrlPrefix(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 121 - (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/www.sso.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 122 - (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 123 - (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 124 - (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)serverName(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 125 - (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/klient.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 126 - (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 127 -(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 128 -\\(% style="color:#008000; font-weight:bold" %)**<filter>**(%%) 129 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS HttpServletRequest Wrapper Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 130 - (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.util.HttpServletRequestWrapperFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 131 -(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 132 -\\(% style="color:#008000; font-weight:bold" %)**<filter>**(%%) 133 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Assertion Thread Local Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 134 - (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.util.AssertionThreadLocalFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 135 -(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 136 -\\(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 137 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Single Sign Out Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 138 - (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 139 -(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 140 -\\(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 141 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Authentication Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 142 - (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 143 -(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 144 - 145 -(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 146 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Validation Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 147 - (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 148 -(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 149 - 150 -(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 151 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS HttpServletRequest Wrapper Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 152 - (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 153 -(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 154 -\\(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 155 - (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Assertion Thread Local Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 156 - (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 157 -(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 158 -\\(% style="color:#008000; font-weight:bold" %)**<listener>**(%%) 159 - (% style="color:#008000; font-weight:bold" %)**<listener-class>**(%%)org.jasig.cas.client.session.SingleSignOutHttpSessionListener(% style="color:#008000; font-weight:bold" %)**</listener-class>**(%%) 160 -(% style="color:#008000; font-weight:bold" %)**</listener>**(%%)## 161 161 ))) 162 -) ))163 - )))89 +1. CAS server musí důvěřovat certifikátu klienta (může se stát, že bude potřeba přidat certifikát na CAS server) a zároveň 90 + klient musí důvěřovat certifikátu serveru. 164 164 1. Pro odhlášení uživatele z CAS je potřeba přistoupit na url ##https:~/~/www.sso.vsb.cz/logout##.((( 165 165 Před odhlášením z CAS je vhodné zrušit session v aplikaci klienta (zaleží to však na konkrétním klientu). 166 166