单点登录（SSO）学习笔记#

1
1. 用户访问系统 A，检测未登录 -> 重定向到 SSO 登录中心
2
2. 用户输入用户名密码 -> SSO 验证通过
3
3. SSO 设置认证 Cookie
4
4. 重定向回系统 A -> 系统 A 读取 Cookie -> 登录成功
5
5. 用户访问系统 B -> 带 Cookie -> 验证通过 -> 登录成功

1
// 前端请求系统A
2
GET /systemA/resource
3

4
// 系统A重定向到SSO
5
GET /sso/login?redirectUrl=/systemA
6

7
// 用户登录SSO
8
POST /sso/authenticate {username,password}
9

10
// SSO 返回JWT Token
11
HTTP 302 Redirect to /systemA?token=eyJhbGciOiJIUzI1NiIsInR...
12

13
// 系统A验证Token
14
Claims claims = Jwts.parser()
15
                   .setSigningKey(secretKey)
16
                   .parseClaimsJws(token)
17
                   .getBody();
18
System.out.println("User: " + claims.getSubject());

1
@Configuration
2
@EnableWebSecurity
3
public class SecurityConfig extends WebSecurityConfigurerAdapter {
4
    @Override
5
    protected void configure(HttpSecurity http) throws Exception {
6
        http
7
          .authorizeRequests()
8
            .antMatchers("/login","/sso/**").permitAll()
9
            .anyRequest().authenticated()
10
          .and()
11
            .oauth2Login()
12
            .loginPage("/login")
13
            .defaultSuccessUrl("/home", true);
14
    }
15
}

1
@Configuration
2
public class CasSecurityConfig extends WebSecurityConfigurerAdapter {
3
    @Override
4
    protected void configure(HttpSecurity http) throws Exception {
5
        http
6
          .authorizeRequests()
7
            .anyRequest().authenticated()
8
          .and()
9
            .logout().logoutSuccessUrl("/sso/logout")
10
          .and()
11
            .cas()
12
            .loginUrl("https://sso.example.com/login")
13
            .serviceProperties(serviceProperties());
14
    }
15

16
    @Bean
17
    public ServiceProperties serviceProperties() {
18
        ServiceProperties sp = new ServiceProperties();
19
        sp.setService("https://app.example.com/login/cas");
20
        sp.setSendRenew(false);
21
        return sp;
22
    }
23
}