V5平台二次开发指南
3.27.3.3. CAS集成案例

打开webapps\seeyon\WEB-INF\web.xml文件，在第一个filter前添加如下配置：

<!-- ======================== 单点登录开始 ======================== -->
<!-- 用于单点退出，该过滤器用于实现单点登出功能，可选配置-->
  <listener>
   <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
  </listener>

<!-- 该过滤器用于实现单点登出功能，可选配置。 -->
  <filter>
   <filter-name>CAS Single Sign Out Filter</filter-name>
   <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
  </filter>
  <filter-mapping>
   <filter-name>CAS Single Sign Out Filter</filter-name>
   <url-pattern>/*</url-pattern>
  </filter-mapping>

  <!-- 该过滤器负责对Ticket的校验工作，必须启用它 -->
  <filter>
   <filter-name>CAS Validation Filter</filter-name>
   <filter-class>
    com.seeyon.cmp.authentication.cas.client.validation.CMPReceivingTicketValidationFilter</filter-class>
   <init-param>
    <param-name>casServerUrlPrefix</param-name>
    <param-value>https://m1.ssodemo.com:8443/cas</param-value>
   </init-param>
   <init-param>
    <param-name>serverName</param-name>
    <param-value>http://oa.ssodemo.com:8082</param-value>
   </init-param>
  </filter>
  <filter-mapping>
   <filter-name>CAS Validation Filter</filter-name>
   <url-pattern>/*</url-pattern>
  </filter-mapping>

  <!--
   该过滤器负责实现HttpServletRequest请求的包裹，
   比如允许开发者通过HttpServletRequest的getRemoteUser()方法获得SSO登录用户的登录名，可选配置。
  -->
  <filter>
   <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
   <filter-class>
    org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>
  </filter>
  <filter-mapping>
   <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
   <url-pattern>/*</url-pattern>
  </filter-mapping>

    <!--
  该过滤器使得开发者可以通过org.jasig.cas.client.util.AssertionHolder来获取用户的登录名。
  比如AssertionHolder.getAssertion().getPrincipal().getName()。
  -->
  <filter>
   <filter-name>CAS Assertion Thread Local Filter</filter-name>
   <filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filter-class>
  </filter>
  <filter-mapping>
   <filter-name>CAS Assertion Thread Local Filter</filter-name>
   <url-pattern>/*</url-pattern>
  </filter-mapping>
<!-- ======================== 单点登录结束 ======================== -->

注意：有两个变量要根据部署环境的变化进行修改：

casServerUrlPrefix：CAS服务器地址

serverName：OA服务器自己的地址

打开webapps\seeyon\WEB-INF\cfgHome\plugin\cmp\login.xml文件，修改配置如下：

<?xml version="1.0" encoding="UTF-8"?>
<login>
 <bean class="com.seeyon.cmp.authentication.CTPUsernamePasswordLoginAuthentication"
  before="com.seeyon.ctp.login.auth.DefaultLoginAuthentication" />
  
 <!-- <bean class="com.seeyon.cmp.authentication.CTPTicketLoginAuthentication"
  before="com.seeyon.ctp.portal.sso.login.SSOTicketLoginAuthentication" /> -->
</login>

关闭并保存文件。

打开webapps\seeyon\WEB-INF\cfgHome\plugin\cmp\spring\spring-cmp-authentication.xml，修改配置如下：

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd">
<beans default-autowire="byName">

 <bean id="cmpSSOLogout"
  class="com.seeyon.cmp.authentication.CMPSSOLogout"
  singleton="true">
  <property name="ssoAuthentication" ref="cmpUsernamePasswordCASAuthentication" />
 </bean>
 
 <bean id="cmpUsernamePasswordAuthentication"
  class="com.seeyon.cmp.authentication.cas.CMPUsernamePasswordCASAuthentication"
  singleton="true">
  <property name="serverUrl" value="https://m1.ssodemo.com:8443/cas/v1/tickets/" />
 </bean>

 <bean id="cmpTicketValidation"
  class="com.seeyon.cmp.authentication.cas.CMPTicketCASValidation" 
  singleton="true">
  <property name="serverUrl" value="https://m1.ssodemo.com:8443/cas/v1/tickets/" />
  <property name="serviceUrl" value="http://oa.ssodemo.com:8082/seeyon/ajax.do" />
 </bean>
</beans>

注意：该配置在文件中已经默认存在，这里只需修改serverUrl和serviceUrl地址即可，与web.xml中访问的域名一致，修改完成以后关闭并保存文件。

至此，OA部分的配置已经全部完成，使用OA用户名和密码登录成功，则返回值中会包含ticket，这个ticket将用于其他第三方应用进行登录认证：