CAS客户端使用Ajax登陆（即保留原有客户端登录页面）

前言

    因为对项目的不熟悉，在使用CAS的时候，踩了蛮多的坑，前面的文章提到了怎么跟shiro集成，可以说是花了比较多的时间。而实际的需求却不止于此。公司希望保留原有应用的登录页面。这个可又是一个大坑啊。自己花了几天时间来实现这个需求。逛了不知道多少的帖子。

    综合网上的帖子来看，在保留原有的登陆页面上有两个实现的思路，一个是通过Ajax+JSONP在前端做，另一个是在后端用HttpClient来实现。总体的思路都是模拟请求登陆页，先获取lt及execution再获取Ticket。

    首先用的HttpClient来实现，但是后面发现登陆的问题是解决了，但是存在Cookie跨域的问题，这样子就失去了单点登录的意义了。（虽然错了后面会贴出来Demo）

由于没有找到解决方案，后面采取Ajax+JSONP来实现，这种方式比较简单。虽然保留了客户端应用的界面，但是原有的登陆方法是已经弃用了的。只是保留了界面，原来的CASclient的配置还是要配置。shiro+cas的集成前篇已经说了，所以这里就不再重复贴了。需要的可以找一下前面的帖子。[直达链接]

一、使用Ajax+JSONP实现

1、在server的casLoginView.jsp页面添加如下代码，用来获取lt及execution

<%    String action = request.getParameter("action");    if (action != null && action.equals("getlt")) {        String callbackName = request.getParameter("callback");        String jsonData = "{\"lt\":\"" + request.getAttribute("loginTicket") + "\", \"execution\":\"" + request.getAttribute("flowExecutionKey") + "\"}";        String jsonp = callbackName + "(" + jsonData + ")";        //response.setContentType("application/javascript");        response.getWriter().write(jsonp);    }else{%><!--.....原来页面的HTML代码......--><% } %>

2、修改客户端

  2.1、修改客户端登录页面表单

    添加lt、execution及_eventId表单字段。

    修改表单提交的action为携带service参数的server地址

<form method="post" action="http://www.cas.com/login?service=http://127.0.0.1:8080/cas_client/a/cas" id="loginForm">    <input type="text" id="username" name="username" value="${username}" title="请输入用户名" placeholder="用户名" class="login1form_control login1uname"/>    <input type="password" id="password" name="password" title="请输入密码" placeholder="密码" class="login1form_control login1pword login1m-b"/>    <%--CAS单点登录--%>    <input type="hidden" name="lt" id="lt" value=""/>    <input type="hidden" name="execution" id="execution" value=""/></span>    <input type="hidden" name="_eventId" value="submit"/>    <%--CAS单点登录--%>    <button id="login1btn" class="login1btn login1btn-success login1btn-block" type="submit">登录</button></form>

  2.2、利用JSONP获取lt及execution参数

    添加如下js，用来初始化lt、execution的值

    注意修改server地址及service参数

<script type="text/javascript">    $(function(){        $.getJSON("http://www.cas.com/login?action=getlt&service=http://127.0.0.1:8080/cas_client/a/cas&callback=?",            function (data) {                $("#lt").val(data.lt);                $("#execution").val(data.execution);            })    })</script>

这种方式只需在配置好CAS之后修改页面即可。

二、使用HttpClient来实现

    Demo如下，这种方式仅供参考，未解决跨域问题

import org.apache.http.Header;import org.apache.http.HttpEntity;import org.apache.http.HttpResponse;import org.apache.http.client.HttpClient;import org.apache.http.client.methods.CloseableHttpResponse;import org.apache.http.client.methods.HttpGet;import org.apache.http.client.methods.HttpUriRequest;import org.apache.http.client.methods.RequestBuilder;import org.apache.http.cookie.Cookie;import org.apache.http.impl.client.BasicCookieStore;import org.apache.http.impl.client.CloseableHttpClient;import org.apache.http.impl.client.HttpClients;import org.apache.http.util.EntityUtils;import java.io.BufferedReader;import java.io.IOException;import java.io.InputStreamReader;import java.net.URI;import java.util.HashMap;import java.util.List;import java.util.Map;/** * A example that demonstrates how HttpClient APIs can be used to perform * form-based logon. 一个例子，演示了如何HttpClient API可用于执行基于表单的登录。 */public class ClientFormLogin {    private static final String USERNAME = "admin";    private static final String PASSWORD = "123456";    private static final String CAS_LOGIN_URL = "http://www.cas.com/login?service=http://127.0.0.1:8081/cas_client/a/cas";    public static void main(String[] args) throws Exception {        BasicCookieStore cookieStore = new BasicCookieStore();        CloseableHttpClient httpclient = HttpClients.custom().setDefaultCookieStore(cookieStore).build();        try {            //访问Server登陆页面获得Cookie            HttpGet initServerGet = new HttpGet(CAS_LOGIN_URL);            CloseableHttpResponse response1 = httpclient.execute(initServerGet);            try {                HttpEntity entity = response1.getEntity();                System.out.println("Login form get: " + response1.getStatusLine());                EntityUtils.consume(entity);                System.out.println("Initial set of cookies:");                List<Cookie> cookies = cookieStore.getCookies();                if (cookies.isEmpty()) {                    System.out.println("None");                } else {                    for (int i = 0; i < cookies.size(); i++) {                        System.out.println("- " + cookies.get(i).toString());                    }                }            } finally {                response1.close();            }            //获取lt及execution参数            Map<String, String> map = doCasLoginRequest(httpclient, CAS_LOGIN_URL);            //封装参数            HttpUriRequest login = RequestBuilder.post()                    .setUri(new URI(CAS_LOGIN_URL))                    .addParameter("username", USERNAME)                    .addParameter("password", PASSWORD)                    .addParameter("lt", map.get("lt"))                    .addParameter("_eventId", "submit")                    .addParameter("submit", "登录")                    .addParameter("execution", map.get("execution")).build();            CloseableHttpResponse response2 = httpclient.execute(login);            String location = response2.getFirstHeader("Location").getValue();            System.out.println(location.substring(location.indexOf("?ticket=") + 8));            Header[] tgtHead = response2.getHeaders("Set-Cookie");            //无需重新再请求，否则会导致重定向过多            HttpGet httpGet = new HttpGet(location);            httpGet.setHeaders(tgtHead);            CloseableHttpResponse response3 = httpclient.execute(httpGet);            System.out.println("请求访问地址状态码: " + response3.getStatusLine());            String body = EntityUtils.toString(response3.getEntity());            try {                HttpEntity entity = response2.getEntity();                System.out.println("Login form get: " + response2.getStatusLine());                EntityUtils.consume(entity);                System.out.println("Post logon cookies:");                List<Cookie> cookies = cookieStore.getCookies();                if (cookies.isEmpty()) {                    System.out.println("None");                } else {                    for (int i = 0; i < cookies.size(); i++) {                        System.out.println("- " + cookies.get(i).toString());                    }                }            } finally {                response2.close();            }        } finally {            httpclient.close();        }    }    private static Map<String, String> doCasLoginRequest(HttpClient httpclient, String url)            throws IOException {        Map<String, String> result = new HashMap<>(16);        HttpGet httpget = new HttpGet(url);        HttpResponse response = httpclient.execute(httpget);        HttpEntity entity = response.getEntity();        BufferedReader rd = new BufferedReader(new InputStreamReader(                entity.getContent(), "UTF-8"));        String tempLine = rd.readLine();        String lt = "<input type=\"hidden\" name=\"lt\" value=\"";        String execution = "<input type=\"hidden\" name=\"execution\" value=\"";        while (tempLine != null) {            int lt_index = tempLine.indexOf(lt);            if (lt_index != -1) {                String s1 = tempLine.substring(lt_index + lt.length());                int index1 = s1.indexOf("\"");                if (index1 != -1) {                    result.put("lt", s1.substring(0, index1));                }            }            int execution_index = tempLine.indexOf(execution);            if (execution_index != -1) {                String s1 = tempLine.substring(execution_index + execution.length());                int index1 = s1.indexOf("\"");                if (index1 != -1) {                    result.put("execution", s1.substring(0, index1));                }            }            tempLine = rd.readLine();        }        if (entity != null) {            entity.consumeContent();        }        return result;    }}

参考文章：http://blog.csdn.net/just_lion/article/details/39316169

          http://blog.csdn.net/mengtianyalll/article/details/50073099