Spring Boot Security CAS 集成

<dependency>
	<groupId>org.springframework.boot</groupId>
	<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
	<groupId>org.springframework.security</groupId>
	<artifactId>spring-security-cas</artifactId>
</dependency>

@SpringBootApplication
@RestController
public class DemoApplication extends WebSecurityConfigurerAdapter {

	public static void main(String[] args) {
		SpringApplication.run(DemoApplication.class, args);
	}

	@Override
	protected void configure(AuthenticationManagerBuilder auth) throws Exception {
		auth.authenticationProvider(casAuthenticationProvider());
	}

	@Override
	protected void configure(HttpSecurity http) throws Exception {
		http.exceptionHandling().authenticationEntryPoint(casEntryPoint()).and().addFilter(casFilter())
				.authorizeRequests().anyRequest().authenticated();
	}

	@Bean
	public CasAuthenticationProvider casAuthenticationProvider() {
		CasAuthenticationProvider casAuthenticationProvider = new CasAuthenticationProvider();
		casAuthenticationProvider.setAuthenticationUserDetailsService(token -> {
			return new User(token.getName(), "", Collections.singletonList(new SimpleGrantedAuthority("user")));
		});
		casAuthenticationProvider.setTicketValidator(new Cas30ServiceTicketValidator("http://192.168.99.230/sso"));
		casAuthenticationProvider.setKey("an_id_for_this_auth_provider_only");
		return casAuthenticationProvider;
	}

	@Bean
	public ServiceProperties serviceProperties() {
		ServiceProperties serviceProperties = new ServiceProperties();
		serviceProperties.setService("http://localhost:8080/login/cas");
		return serviceProperties;
	}

	@Bean
	public CasAuthenticationEntryPoint casEntryPoint() {
		CasAuthenticationEntryPoint casEntryPoint = new CasAuthenticationEntryPoint();
		casEntryPoint.setLoginUrl("http://192.168.99.230/sso/login");
		casEntryPoint.setServiceProperties(serviceProperties());
		return casEntryPoint;
	}

	@Bean
	public CasAuthenticationFilter casFilter() throws Exception {
		CasAuthenticationFilter casFilter = new CasAuthenticationFilter();
		casFilter.setAuthenticationManager(authenticationManager());
		casFilter.setAuthenticationDetailsSource(new ServiceAuthenticationDetailsSource(serviceProperties()));
		return casFilter;
	}

	@GetMapping("hello")
	public String hello(HttpServletResponse response) {
		return "hello";
	}
}

参考官方文档：
https://docs.spring.io/spring-security/site/docs/5.2.1.BUILD-SNAPSHOT/reference/htmlsingle/#cas

@SpringBootApplication
@RestController
public class DemoApplication {

	public static void main(String[] args) {
		SpringApplication.run(DemoApplication.class, args);
	}

	@GetMapping("hello")
	public String hello() {
		return "hello";
	}

	@Bean
	SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {

		ServiceProperties serviceProperties = new ServiceProperties();
		serviceProperties.setService("http://localhost:8080/login/cas");

		CasAuthenticationEntryPoint casEntryPoint = new CasAuthenticationEntryPoint();
		casEntryPoint.setLoginUrl("https://localhost:8443/sso/login");
		casEntryPoint.setServiceProperties(serviceProperties);

		CasAuthenticationProvider casAuthenticationProvider = new CasAuthenticationProvider();
		casAuthenticationProvider.setAuthenticationUserDetailsService(token -> {
			System.out.println(token);
			return new User(token.getName(), "", Collections.singletonList(new SimpleGrantedAuthority("user")));
		});
		casAuthenticationProvider
				.setTicketValidator(new Cas30ServiceTicketValidator("https://localhost:8443/sso"));
		casAuthenticationProvider.setKey("an_id_for_this_auth_provider_only");

		CasAuthenticationFilter casFilter = new CasAuthenticationFilter();
		casFilter.setAuthenticationManager(new ProviderManager(casAuthenticationProvider));
		casFilter.setAuthenticationDetailsSource(new ServiceAuthenticationDetailsSource(serviceProperties));

		http.authorizeHttpRequests(authorize -> authorize.anyRequest().authenticated())
				.exceptionHandling(exception -> exception.authenticationEntryPoint(casEntryPoint)).addFilter(casFilter);

		return http.build();
	}
}