Změny dokumentu CAS Java klient
Naposledy změněno Petr Abrahamczik 16.04.2024 10:22
Od verze 9.1
změnil(a) Petr Abrahamczik
k 07.02.2019 11:11
k 07.02.2019 11:11
Změnit komentář:
Žádné komentáře k této verzi
Na verzi 13.1
změnil(a) Petr Abrahamczik
k 07.02.2019 13:43
k 07.02.2019 13:43
Změnit komentář:
Žádné komentáře k této verzi
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -1,4 +1,4 @@ 1 -V ukázkovém příkladu je popsán způsob konfigurace webové aplikace v Javě pomocí [[Java Apereo CAS Client>>https://github.com/apereo/java-cas-client]]. 1 +V ukázkovém příkladu je popsán základní způsob konfigurace webové aplikace v Javě pomocí [[Java Apereo CAS Client>>https://github.com/apereo/java-cas-client]]. Aplikace je schopna získat přihlášeného uživatele pomocí CAS v3 protokolu. 2 2 3 3 1. Do aplikace je potřeba přidat knihovny klienta https://mvnrepository.com/artifact/org.jasig.cas.client/cas-client-core buď přímo a nebo pomocí nějakého buildovacího nástroje např. Maven.((( 4 4 {{code language="xml"}} ... ... @@ -9,7 +9,9 @@ 9 9 </dependency> 10 10 {{/code}} 11 11 ))) 12 -1. Nakonfigurovat web.xml. V uvedené konfiguraci je nutné nahradit adresu klienta https://klient.vsb.cz s URL našeho serveru.((( 12 +1. Nakonfigurovat ##web.xml##. V uvedené konfiguraci je nutné nahradit adresu klienta https://klient.vsb.cz s URL našeho serveru. V mapování filtru ##CAS Authentication Filter## je možné uvést místo ##/*## kontext do chráněné zóny aplikace např.((( 13 +/private/* 14 + 13 13 {{code language="xml"}} 14 14 <filter> 15 15 <filter-name>CAS Single Sign Out Filter</filter-name> ... ... @@ -85,9 +85,80 @@ 85 85 <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class> 86 86 </listener> 87 87 {{/code}} 90 + 91 +(% class="box" %) 92 +((( 93 +(% class="code" %) 94 +((( 95 +(% style="color:#008000; font-weight:bold" %)##**<filter>**##(%%)## 96 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Single Sign Out Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 97 + (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.session.SingleSignOutFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 98 + (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 99 + (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)casServerUrlPrefix(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 100 + (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/www.sso.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 101 + (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 102 +(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 103 +\\(% style="color:#008000; font-weight:bold" %)**<filter>**(%%) 104 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Authentication Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 105 + (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.authentication.AuthenticationFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 106 + (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 107 + (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)casServerUrlPrefix(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 108 + (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/www.sso.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 109 + (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 110 + (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 111 + (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)serverName(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 112 + (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/klient.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 113 + (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 114 +(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 115 + 116 +(% style="color:#008000; font-weight:bold" %)**<filter>**(%%) 117 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Validation Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 118 + (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.validation.Cas30ProxyReceivingTicketValidationFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 119 + (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 120 + (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)casServerUrlPrefix(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 121 + (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/www.sso.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 122 + (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 123 + (% style="color:#008000; font-weight:bold" %)**<init-param>**(%%) 124 + (% style="color:#008000; font-weight:bold" %)**<param-name>**(%%)serverName(% style="color:#008000; font-weight:bold" %)**</param-name>**(%%) 125 + (% style="color:#008000; font-weight:bold" %)**<param-value>**(%%)https:~/~/klient.vsb.cz(% style="color:#008000; font-weight:bold" %)**</param-value>**(%%) 126 + (% style="color:#008000; font-weight:bold" %)**</init-param>**(%%) 127 +(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 128 +\\(% style="color:#008000; font-weight:bold" %)**<filter>**(%%) 129 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS HttpServletRequest Wrapper Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 130 + (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.util.HttpServletRequestWrapperFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 131 +(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 132 +\\(% style="color:#008000; font-weight:bold" %)**<filter>**(%%) 133 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Assertion Thread Local Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 134 + (% style="color:#008000; font-weight:bold" %)**<filter-class>**(%%)org.jasig.cas.client.util.AssertionThreadLocalFilter(% style="color:#008000; font-weight:bold" %)**</filter-class>**(%%) 135 +(% style="color:#008000; font-weight:bold" %)**</filter>**(%%) 136 +\\(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 137 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Single Sign Out Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 138 + (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 139 +(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 140 +\\(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 141 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Authentication Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 142 + (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 143 +(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 144 + 145 +(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 146 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Validation Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 147 + (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 148 +(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 149 + 150 +(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 151 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS HttpServletRequest Wrapper Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 152 + (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 153 +(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 154 +\\(% style="color:#008000; font-weight:bold" %)**<filter-mapping>**(%%) 155 + (% style="color:#008000; font-weight:bold" %)**<filter-name>**(%%)CAS Assertion Thread Local Filter(% style="color:#008000; font-weight:bold" %)**</filter-name>**(%%) 156 + (% style="color:#008000; font-weight:bold" %)**<url-pattern>**(%%)/*(% style="color:#008000; font-weight:bold" %)**</url-pattern>**(%%) 157 +(% style="color:#008000; font-weight:bold" %)**</filter-mapping>**(%%) 158 +\\(% style="color:#008000; font-weight:bold" %)**<listener>**(%%) 159 + (% style="color:#008000; font-weight:bold" %)**<listener-class>**(%%)org.jasig.cas.client.session.SingleSignOutHttpSessionListener(% style="color:#008000; font-weight:bold" %)**</listener-class>**(%%) 160 +(% style="color:#008000; font-weight:bold" %)**</listener>**(%%)## 88 88 ))) 89 - 1. CAS server musí důvěřovat certifikátu klienta (může se stát, že bude potřeba přidat certifikát na CAS server)a zároveň90 - klient musí důvěřovat certifikátu serveru.162 +))) 163 +))) 91 91 1. Pro odhlášení uživatele z CAS je potřeba přistoupit na url ##https:~/~/www.sso.vsb.cz/logout##.((( 92 92 Před odhlášením z CAS je vhodné zrušit session v aplikaci klienta (zaleží to však na konkrétním klientu). 93 93 ... ... @@ -98,7 +98,7 @@ 98 98 ))) 99 99 1. Přihlášenou osobu v aplikaci lze pak jednoduše zjistit pomoci((( 100 100 {{code language="java"}} 101 - 174 +request.getRemoteUser(); 102 102 {{/code}} 103 103 ))) 104 104