TryDone

menxin32 · 注册时间: 2008-11-17 11:01:05 文章: 3 离线

目前我在使用cas单点登录jforum以及另外的两个系统.我的需求是这样的.jforum以及另外两个系统都是可以不需要登陆就可以匿名执行一些操作的.所以不希望一进入那个系统就直接跳转到cas的登陆页面.所以在这里直接就排除掉了使用过滤器的可能.
打个比方:我希望是这样的.比如进入jforum页面.这个时候是不需要登陆就可以查看的.而点击了某个人之后给它发论坛的内部信息后.则跳转到登陆页面.这个目前我是可以实现的.为了能够更好的使用登陆.所以我目前修改了如下内容.
1:页面上添加.增加登陆和注销相关按钮:
修改header.htm页面部门代码为:

<#if logged>
										<a id="myprofile" class="mainmenu" href="${JForumContext.encodeURL("/user/edit/${session.userId}")}"><img src="${contextPath}/templates/${templateName}/images/icon_mini_profile.gif" border="0" alt="[Profile]" /> ${I18n.getMessage("ForumBase.profile")}</a>  
										<#if bookmarksEnabled>
											<a class="mainmenu" href="${JForumContext.encodeURL("/bookmarks/list/${session.userId}")}"><img src="${contextPath}/templates/${templateName}/images/icon_minipost.gif" alt="[Post]" />${I18n.getMessage("Bookmarks.myBag")}</a> 
										</#if>
										<a id="privatemessages" class="mainmenu" href="${JForumContext.encodeURL("/pm/inbox")}"><img src="${contextPath}/templates/${templateName}/images/icon_mini_message.gif" border="0" alt="[Message]" />
											<#if (session.privateMessages > 0)>
												${I18n.getMessage("ForumBase.newPm")}: (${session.privateMessages})
											<#else>
												${I18n.getMessage("ForumBase.privateMessages")}
											</#if>
										</a> 
										</span>

<a id="logout" class="mainmenu" href="${JForumContext.encodeURL("/user/logout")}"><img src="${contextPath}/templates/${templateName}/images/icon_mini_login.gif" border="0" alt="[Login]" /> ${I18n.getMessage("ForumBase.logout")} [${session.username}] </a></span>
										
									</#if>
									<#if !logged>
										  <a id="logout"  class="mainmenu" href="javascript:void(0)" onclick="window.location.href='http://localhost:8080/JForum/forums/list.page?mypageLogin=logincas'"><img src="${contextPath}/templates/${templateName}/images/icon_mini_login.gif" border="0" alt="[Logout]" />${I18n.getMessage("Login.enter")} </a>
									</#if>

因为页面上添加了登陆按钮的链接为;http://localhost:8080/JForum/forums/list.page?mypageLogin=logincas
所以更改对应的action方法:
net.jforum.view.forum.ForumAction的list方法添加这样的代码:

为了能够随时同步cas在其他系统中更改了用户登陆.所以我需要在当前系统中如果是登陆状态的.就一直同步cas数据.修改如下:
修改JForum的service方法;因为要使用一些初始化参数.所以更改了原service方法的一些顺序.

public void service(HttpServletRequest req, HttpServletResponse res) throws IOException, ServletException
	{
		Writer out = null;
		JForumContext forumContext = null;
		RequestContext request = null;
		ResponseContext response = null;
		String encoding = SystemGlobals.getValue(ConfigKeys.ENCODING);

try {
			// Initializes the execution context
			JForumExecutionContext ex = JForumExecutionContext.get();

request = new WebRequestContext(req);
            response = new WebResponseContext(res);

//uuuuu editby:hubo date: 2008-11-14 pcd:更改原先判断顺序.用来提前初始化所需系统环境变量.并且提前验证当前用户是否登陆.如果已经登陆.则校验远程cas是否已注销.
            
			this.checkDatabaseStatus();

forumContext = new JForumContext(request.getContextPath(),
                SystemGlobals.getValue(ConfigKeys.SERVLET_EXTENSION),
                request,
                response
            );
            ex.setForumContext(forumContext);

JForumExecutionContext.set(ex);

// Setup stuff
			SimpleHash context = JForumExecutionContext.getTemplateContext();
			
			ControllerUtils utils = new ControllerUtils();
			
		 	String ticket = request.getParameter("ticket");
        	
			String module = request.getModule();
			
			// Gets the module class name
			String moduleClass = module != null 
				? ModulesRepository.getModuleClass(module) 
				: null;
//			System.out.println("当前请求的action为:====" + moduleClass);
			System.out.println(req.getSession().getAttribute("edu.yale.its.tp.cas.client.filter.user"));
			System.out.println("当前的edu.yale.its.tp.cas.client.filter.user=" + request.getSessionContext().getAttribute("edu.yale.its.tp.cas.client.filter.user"));
        	if (SessionFacade.isLogged()) {
//        		System.out.println("当前是登陆状态............");
        		if (ticket == null) {
	        		ViewCommon.contextToLogin();
	        		out = this.processCommand(out, request, response, encoding, context, moduleClass);
        		}
        		
    		}else{
//    			System.out.println("当前bushi登陆状态............");
    			if (ticket == null) {
    				if(request.getSessionContext().getAttribute("edu.yale.its.tp.cas.client.filter.user") != null){
    					request.getSessionContext().removeAttribute("edu.yale.its.tp.cas.client.filter.user");
		        		ViewCommon.contextToLogin();
		        		out = this.processCommand(out, request, response, encoding, context, moduleClass);
    				}
        		}
    			
    		}
        	
        //^^^^^ editby:hubo date: 2008-11-14 pcd:更改原先判断顺序.用来提前初始化所需系统环境变量.并且提前验证当前用户是否登陆.如果已经登陆.则校验远程cas是否已注销.
			
			
			utils.refreshSession();
			
			context.put("logged", SessionFacade.isLogged());
			
			// Process security data
			SecurityRepository.load(SessionFacade.getUserSession().getUserId());

utils.prepareTemplateContext(context, forumContext);

if (moduleClass == null) {
				// Module not found, send 404 not found response
				response.sendError(HttpServletResponse.SC_NOT_FOUND);
			}
			else {
				boolean shouldBan = this.shouldBan(request.getRemoteAddr());
				
				if (!shouldBan) {
					context.put("moduleName", module);
					context.put("action", request.getAction());
				}
				else {
					moduleClass = ModulesRepository.getModuleClass("forums");
					context.put("moduleName", "forums");
					((WebRequestContext)request).changeAction("banned");
				}
				
				if (shouldBan && SystemGlobals.getBoolValue(ConfigKeys.BANLIST_SEND_403FORBIDDEN)) {
					response.sendError(HttpServletResponse.SC_FORBIDDEN);
				}
				else {
					context.put("language", I18n.getUserLanguage());
					context.put("session", SessionFacade.getUserSession());
					context.put("request", req);
					context.put("response", response);
					
					out = this.processCommand(out, request, response, encoding, context, moduleClass);
				}
			}
		}
		catch (Exception e) {
			this.handleException(out, response, encoding, e, request);
		}
		finally {
			this.handleFinally(out, forumContext, response);
		}		
	}

自己的CasUserSSO类:

package net.jforum.sso;

import net.jforum.JForumExecutionContext;
import net.jforum.SessionFacade;
import net.jforum.context.RequestContext;
import net.jforum.entities.UserSession;
import net.jforum.util.preferences.ConfigKeys;
import net.jforum.util.preferences.SystemGlobals;
import net.jforum.view.forum.common.ViewCommon;

import org.apache.log4j.Logger;

import edu.yale.its.tp.cas.client.ServiceTicketValidator;

public class CasUserSSO implements SSO {

private static final String CAS_TICKET = "cas_ticket";
	static final Logger logger = Logger.getLogger(CasUserSSO.class.getName());
	private String mySsoNameForSession = "mySsoNameForSession";
	public String authenticateUser(RequestContext request) {
		String username = null;

String errorCode = null;

String errorMessage = null;

String xmlResponse = null;

String ticket = request.getParameter("ticket");
		/* instantiate a new ServiceTicketValidator */

if (ticket != null) {
			try {
				ServiceTicketValidator sv = buildServiceTicketValidator(ticket);
				/* contact CAS and validate */
				sv.validate();
				
				/*
				 * if we want to look at the raw response, we can use getResponse()
				 */

if (sv.isAuthenticationSuccesful()) {
					username = sv.getUser();
					request.getSessionContext().setAttribute(CAS_TICKET, ticket);
					System.out.println("Cas Log Success:"+username);
				} else {
					errorCode = sv.getErrorCode();
					errorMessage = sv.getErrorMessage();
					System.out.println("Cas Log Error:"+errorCode+errorMessage);
				}
			} catch (Exception exc) {
				System.out.println(exc.getMessage());
			}
//			String usernameTmp = request.getSessionContext().getAttribute(this.mySsoNameForSession).toString();
//			if(usernameTmp != null && usernameTmp.trim().equals("")){
//				username = usernameTmp;
//			}
		}
		return username;
	}

private ServiceTicketValidator buildServiceTicketValidator(String ticket) {
		ServiceTicketValidator sv = new ServiceTicketValidator();
		sv.setCasValidateUrl(SystemGlobals.getValue(ConfigKeys.SSO_CASVALIDATEURL));
		sv.setProxyCallbackUrl(SystemGlobals.getValue(ConfigKeys.SSO_PROXYCALLBACKURL));
		RequestContext request = JForumExecutionContext.getRequest();
		String service=(String)request.getSessionContext().getAttribute(ViewCommon.SERVICE_NAME);	
		if(service==null||"".equals(service)){
			service=SystemGlobals.getValue(ConfigKeys.SSO_SERVICE);
		}
		sv.setService(service);
		sv.setServiceTicket(ticket);
		return sv;
	}

public boolean isSessionValid(UserSession userSession, RequestContext request) {
		String ticket = request.getParameter("ticket");

//如果当前系统已登录.则清除session来重新获取远程的cas 看看是否cas也一直没有失效

if (ticket != null) {
				return false;
			}
		
		return true;

}
}

menxin32 · 注册时间: 2008-11-17 11:01:05 文章: 3 离线

遗留问题:
目前我这样修改后可以满足这样的情况:
如果当前用户在jfroum中处于登陆状态.就会随时检测当前用户是否在其他系统中已经被注销或者更改了其他用户登陆.
但是如果当前用户是从别的系统中登陆的.在进入jfroum中时是不显示为登陆的.只有访问了需要权限的模块.比如发消息等才会去同步cas.这个时候才会变为已登录.
这就不是我想要的了.但是又要求那些不需要权限验证的模块能够匿名访问.这就让我吐血了.我如果想要验证当前用户是否登陆.就必须请求cas.但是请求了cas.没有登陆的话就会跳到登陆页面.有没有什么方法.是访问了cas系统.直接返回告诉我没登陆.而不是跳转到cas的登陆页面的?

menxin32 · 注册时间: 2008-11-17 11:01:05 文章: 3 离线

我尝试使用session.如果我在别的系统中登陆了.我就新增一个session,但是这个新增的session却无法在另一个系统中读取到.看来session也无法解决.兄弟们.有没好的方法啊?难道要改cas啊..cas的源码好发麻啊...看不来.谁能给个指点啊.