(四)SSO之CAS框架单点登录,自定义验证登录方式

应需求的变化，在登录cas的时候，默认根据用户名和密码进行验证，如果加上用户名，密码和一个系统标识进行验证呢？该如何做呢？

      我们知道cas默认的登录界面中，输入的用户名和密码，再配置一下deployerConfigContext.xml 这个文件中的bean  org.jasig.cas.adaptors.jdbc.QueryDatabaseAuthenticationHandler 的这个标签，写上对应的sql，以及在<bean id="dataSource" class="org.springframework.jdbc.datasource.DriverManagerDataSource">中配置数据库驱动，数据库名称，以及登陆密码等。

      如果再加上一个其他的验证该怎么做呢？

      1  根据xml中bean标签的提示，很容器找到这个类QueryDatabaseAuthenticationHandler.java类，首先先修改login-webflow.xml，修改代码如下所示：

<binder>  
            <binding property="username" />  
            <binding property="password" />  
       <binding property="systemId" />  
        </binder>  

      其中<bingding property="systemId" />与界面中传递过来的隐含域一致。

      2   casLoginView.jsp中增加的js代码如下所示，从登陆地址的url传递参数。

<script language="javascript"  type="text/javascript">   
    window.onload=function()//用window的onload事件，窗体加载完毕的时候  
{  
   //do something  
   var result = location.search.match(new RegExp("[?&]" + 'systemId'+ "=([^&]+)","i"));    
    if(result == null || result.length < 1){    
   
     result ="";  
    }   
      
          
    $("#systemId")[0].value=result[1];  
}  
      
</script>  

      参登陆页面地址为https://www.cdvcloud.com:8443/cas/login?systemId=vms2.0 ，在第一次登陆界面的时候会携带这两个参数https://www.cdvcloud.com:8443/cas/login?service=http%3A%2F%2F172.16.3.101%3A8080%2Fvms2.0%2Fuser%2FtoMain%2F 其中的一个为我们的自定义的系统标识，第二个为cas验证数据库成功后转到的主界面。

      3   在登录界面中加上了hidden，以此来传递给CAS。

<input type="hidden" name="systemId" id="systemId">

 

      4  修改CAS源代码，UsernamePasswordCredentials.java，代码如下所示。

/* 
 * Copyright 2007 The JA-SIG Collaborative. All rights reserved. See license 
 * distributed with this file and available online at 
 * http://www.ja-sig.org/products/cas/overview/license/ 
 */  
package org.jasig.cas.authentication.principal;  
  
import javax.validation.constraints.NotNull;  
import javax.validation.constraints.Size;  
  
/** 
 * UsernamePasswordCredentials respresents the username and password that a user 
 * may provide in order to prove the authenticity of who they say they are. 
 *  
 * @author Scott Battaglia 
 * @version $Revision: 1.2 $ $Date: 2007/01/22 20:35:26 $ 
 * @since 3.0 
 * <p> 
 * This is a published and supported CAS Server 3 API. 
 * </p> 
 */  
public class UsernamePasswordCredentials implements Credentials {  
  
    /** Unique ID for serialization. */  
    private static final long serialVersionUID = -8343864967200862794L;  
  
    /** The username. */  
    @NotNull  
    @Size(min=1,message = "required.username")  
    private String username;  
  
    /** The password. */  
    @NotNull  
    @Size(min=1, message = "required.password")  
    private String password;  
  
    /** The systemId for vms2.0 for sql validate xx add 2014��7��21��16:12:51. */  
    @NotNull  
    @Size(min=1, message = "required.systemId")  
    private String systemId;  
    /*systemId  begin*/  
  
    /** 
     * @return Returns the systemId. 
     */  
     
    public String getSystemId() {  
        return systemId;  
    }  
  
    public void setSystemId(String systemId) {  
        this.systemId = systemId;  
    }  
  
     public String toStringSystemId() {  
        return "[systemId: " + this.systemId + "]";  
    }  
  
    /*end */  
  
  
    /** 
     * @return Returns the password. 
     */  
    public final String getPassword() {  
        return this.password;  
    }  
  
    /** 
     * @param password The password to set. 
     */  
    public final void setPassword(final String password) {  
        this.password = password;  
    }  
  
    /** 
     * @return Returns the userName. 
     */  
    public final String getUsername() {  
        return this.username;  
    }  
  
    /** 
     * @param userName The userName to set. 
     */  
    public final void setUsername(final String userName) {  
        this.username = userName;  
    }  
  
    public String toString() {  
        return "[username: " + this.username + "]";  
    }  
  
    @Override  
    public boolean equals(final Object o) {  
        if (this == o) return true;  
        if (o == null || getClass() != o.getClass()) return false;  
  
        UsernamePasswordCredentials that = (UsernamePasswordCredentials) o;  
  
        if (password != null ? !password.equals(that.password) : that.password != null) return false;  
        if (username != null ? !username.equals(that.username) : that.username != null) return false;  
  
        return true;  
    }  
  
    @Override  
    public int hashCode() {  
        int result = username != null ? username.hashCode() : 0;  
        result = 31 * result + (password != null ? password.hashCode() : 0);  
        return result;  
    }  
}  

      除了cas自己的用户名和密码，添加自己的systemId标识。

      5  修改QueryDatabaseAuthenticationHandler.java类 , 代码如下所示。

/* 
 * Copyright 2007 The JA-SIG Collaborative. All rights reserved. See license 
 * distributed with this file and available online at 
 * http://www.ja-sig.org/products/cas/overview/license/ 
 */  
package org.jasig.cas.adaptors.jdbc;  
  
import org.jasig.cas.authentication.handler.AuthenticationException;  
import org.jasig.cas.authentication.principal.UsernamePasswordCredentials;  
import org.springframework.dao.IncorrectResultSizeDataAccessException;  
  
import javax.validation.constraints.NotNull;  
  
/** 
 * Class that if provided a query that returns a password (parameter of query 
 * must be username) will compare that password to a translated version of the 
 * password provided by the user. If they match, then authentication succeeds. 
 * Default password translator is plaintext translator. 
 *  
 * @author Scott Battaglia 
 * @author Dmitriy Kopylenko 
 * @version $Revision$ $Date$ 
 * @since 3.0 
 */  
public final class QueryDatabaseAuthenticationHandler extends  
    AbstractJdbcUsernamePasswordAuthenticationHandler {  
  
    @NotNull  
    private String sql;  
  
    protected final boolean authenticateUsernamePasswordInternal(final UsernamePasswordCredentials credentials) throws AuthenticationException {  
        final String username = getPrincipalNameTransformer().transform(credentials.getUsername());  
        final String password = credentials.getPassword();  
        //xx add 2014 7 21  16:27:58 for vms2.0 systemid begin----------  
          //final String systemId = credentials.getSystemId();  
        String mySystemId = credentials.getSystemId();  
        String[] systemIdGroup=mySystemId.split(",");  
        String systemId= systemIdGroup[0];  
          System.out.println("systemId---------"+systemId+"----------------systemid value");  
          //xxadd 2014 7  21   16:27:58 for vms2.0 systemid end----------  
        final String encryptedPassword = this.getPasswordEncoder().encode(  
            password);  
          
        try {  
            final String dbPassword = getJdbcTemplate().queryForObject(  
                this.sql, String.class, username,systemId);  
            return dbPassword.equals(encryptedPassword);  
        } catch (final IncorrectResultSizeDataAccessException e) {  
            // this means the username was not found.  
            return false;  
        }  
    }  
  
    /** 
     * @param sql The sql to set. 
     */  
    public void setSql(final String sql) {  
        this.sql = sql;  
    }  
}