import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
public void init(FilterConfig filterConfig) throws ServletException {
		String casServerLoginUrl = "http://sso.jadyer.com:8080/cas-server-web/login";
		String casServerUrlPrefix = "http://sso.jadyer.com:8080/cas-server-web";
		String casClientServerName = "http://boss.jadyer.com:8080";
		AuthenticationFilter casAuthenticationFilter = new AuthenticationFilter();
		casAuthenticationFilter.setCasServerLoginUrl(casServerLoginUrl);
		casAuthenticationFilter.setServerName(casClientServerName);
		Cas20ProxyReceivingTicketValidationFilter casTicketValidationFilter = new Cas20ProxyReceivingTicketValidationFilter();
		casTicketValidationFilter.setServerName(casClientServerName);
		casTicketValidationFilter.setTicketValidator(new Cas20ServiceTicketValidator(casServerUrlPrefix));
		filters[0] = new SingleSignOutFilter();
//		filters[1] = new AuthenticationFilter();
//		filters[2] = new Cas20ProxyReceivingTicketValidationFilter();
		filters[1] = casAuthenticationFilter;
		filters[2] = casTicketValidationFilter;
		filters[3] = new HttpServletRequestWrapperFilter();
		filters[4] = new AssertionThreadLocalFilter();
		for(Filter obj : filters){
			System.out.println("[复合Filter]-->Initializing Filter defined in ApplicationContext: '" + obj.toString() + "'");
			obj.init(filterConfig);
		}
	}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
public Cas20ProxyReceivingTicketValidationFilter getCas20ProxyReceivingTicketValidationFilter() {
    Cas20ProxyReceivingTicketValidationFilter cas20ProxyReceivingTicketValidationFilter = new Cas20ProxyReceivingTicketValidationFilter();
    cas20ProxyReceivingTicketValidationFilter.setServerName(serverUrl);
    cas20ProxyReceivingTicketValidationFilter.setTicketValidator(new Cas20ServiceTicketValidator(casServerUrlPrefix));
    cas20ProxyReceivingTicketValidationFilter.setRedirectAfterValidation(true);
    return cas20ProxyReceivingTicketValidationFilter;
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    if (authentication.getDetails() instanceof ProxyCallbackAndServiceAuthenticationDetails &&
            getTicketValidator() instanceof Cas20ServiceTicketValidator) {
        String proxyCallbackUrl = ((ProxyCallbackAndServiceAuthenticationDetails) authentication.getDetails())
                .getProxyCallbackUrl();
        ((Cas20ServiceTicketValidator) getTicketValidator()).setProxyCallbackUrl(proxyCallbackUrl);
    }
    return super.authenticate(authentication);
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Override
public TicketValidator build() {
    Cas20ServiceTicketValidator ticketValidator = new Cas20ServiceTicketValidator(casServerUrlPrefix);
    if (proxyChainsValidation != null) {
        logger.warn(OMISSION_MESSAGE_TEMPLATE, "proxyChainsValidation");
    }
    if (proxyChains != null) {
        logger.warn(OMISSION_MESSAGE_TEMPLATE, "proxyChains");
    }
    if (allowEmptyProxyChain != null) {
        logger.warn(OMISSION_MESSAGE_TEMPLATE, "allowEmptyProxyChain");
    }
    configure(ticketValidator);
    return ticketValidator;
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Override
protected void configure(Cas20ServiceTicketValidator ticketValidator) {
    super.configure(ticketValidator);
    if (proxyGrantingTicketStorage != null) {
        ticketValidator.setProxyGrantingTicketStorage(proxyGrantingTicketStorage);
    }
    if (proxyRetriever != null) {
        ticketValidator.setProxyRetriever(proxyRetriever);
    }
    if (StringUtils.hasText(proxyCallbackUrl)) {
        ticketValidator.setProxyCallbackUrl(proxyCallbackUrl);
    }
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Test
public void testDoGetBadTicket() throws Exception {
    //Mock some objects.
    HttpServletRequest request = createDoGetHttpServletRequest(CONVERSATION_TICKET, TICKET, "false");
    HttpServletResponse response = createMockHttpServletResponse();
    Cas20ServiceTicketValidator ticketValidator = PowerMockito.mock(Cas20ServiceTicketValidator.class);
    PowerMockito.when(ticketValidator.validate(TICKET, URL_WITH_CONVERSATION)).thenThrow(new TicketValidationException("Invalid Ticket"));

    PowerMockito.mockStatic(ExternalAuthentication.class);
    BDDMockito.given(ExternalAuthentication.startExternalAuthentication(request)).willThrow(new ExternalAuthenticationException());

    //Prep our object
    ShibcasAuthServlet shibcasAuthServlet = createShibcasAuthServlet();

    //Override the internal Cas20TicketValidator because we don't want it to call a real server
    MemberModifier.field(ShibcasAuthServlet.class, "ticketValidator").set(shibcasAuthServlet, ticketValidator);

    //Standard request/response - bad ticket
    BDDMockito.given(request.getAttribute(ExternalAuthentication.FORCE_AUTHN_PARAM)).willReturn("false");
    BDDMockito.given(request.getAttribute(ExternalAuthentication.PASSIVE_AUTHN_PARAM)).willReturn("false");
    shibcasAuthServlet.doGet(request, response);

    //Verify
    verify(request).getRequestDispatcher("/no-conversation-state.jsp");
    verify(response).setStatus(404);
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Bean
@ConditionalOnMissingBean(CasAuthenticationProvider.class)
public CasAuthenticationProvider casAuthenticationProvider(){
	CasAuthenticationProvider casProvider = new CasAuthenticationProvider();
	casProvider.setAuthenticationUserDetailsService(new UserDetailsByNameServiceWrapper<>(userDetailsService));
	casProvider.setServiceProperties(serviceProperties());
	casProvider.setTicketValidator(new Cas20ServiceTicketValidator(bootSecurityConfig.getCas().getCasServerUrl()));
	casProvider.setKey(bootSecurityConfig.getCas().getKey());
	return casProvider;
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Test
public void testDoGetStandard() throws Exception {
    //Mock some objects.
    HttpServletRequest request = createDoGetHttpServletRequest(CONVERSATION_TICKET, TICKET, null);
    HttpServletResponse response = createMockHttpServletResponse();
    Assertion assertion = createMockAssertion();

    Cas20ServiceTicketValidator ticketValidator = PowerMockito.mock(Cas20ServiceTicketValidator.class);
    PowerMockito.when(ticketValidator.validate(TICKET, URL_WITH_CONVERSATION)).thenReturn(assertion);

    PowerMockito.mockStatic(ExternalAuthentication.class);
    BDDMockito.given(ExternalAuthentication.startExternalAuthentication(request)).willReturn(E1S1);

    //Prep our object
    ShibcasAuthServlet shibcasAuthServlet = createShibcasAuthServlet();

    //Override the internal Cas20TicketValidator because we don't want it to call a real server
    MemberModifier.field(ShibcasAuthServlet.class, "ticketValidator").set(shibcasAuthServlet, ticketValidator);

    //Standard request/response
    BDDMockito.given(request.getAttribute(ExternalAuthentication.FORCE_AUTHN_PARAM)).willReturn("false");
    BDDMockito.given(request.getAttribute(ExternalAuthentication.PASSIVE_AUTHN_PARAM)).willReturn("false");
    shibcasAuthServlet.doGet(request, response);

    //Verify
    verify(request).setAttribute(ExternalAuthentication.PRINCIPAL_NAME_KEY, JDOE);
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Test
public void testDoGetPassiveAuthenticated() throws Exception {
    //Mock some objects.
    HttpServletRequest request = createDoGetHttpServletRequest(CONVERSATION_TICKET + "&gatewayAttempted=true", TICKET, "true");
    HttpServletResponse response = createMockHttpServletResponse();
    Assertion assertion = createMockAssertion();

    Cas20ServiceTicketValidator ticketValidator = PowerMockito.mock(Cas20ServiceTicketValidator.class);
    PowerMockito.when(ticketValidator.validate(TICKET, URL_WITH_CONVERSATION_GATEWAY_ATTEMPTED)).thenReturn(assertion);

    PowerMockito.mockStatic(ExternalAuthentication.class);
    BDDMockito.given(ExternalAuthentication.startExternalAuthentication(request)).willReturn(E1S1);

    //Prep our object
    ShibcasAuthServlet shibcasAuthServlet = createShibcasAuthServlet();

    //Override the internal Cas20TicketValidator because we don't want it to call a real server
    MemberModifier.field(ShibcasAuthServlet.class, "ticketValidator").set(shibcasAuthServlet, ticketValidator);

    //Passive request/response with authenticated user
    BDDMockito.given(request.getAttribute(ExternalAuthentication.FORCE_AUTHN_PARAM)).willReturn("false");
    BDDMockito.given(request.getAttribute(ExternalAuthentication.PASSIVE_AUTHN_PARAM)).willReturn("true");
    shibcasAuthServlet.doGet(request, response);

    //Verify
    verify(request).setAttribute(ExternalAuthentication.PRINCIPAL_NAME_KEY, JDOE);
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Test
public void testDoGetPassiveNotAuthenticated() throws Exception {
    //Mock some objects.
    HttpServletRequest request = createDoGetHttpServletRequest("conversation=e1s1&gatewayAttempted=true", null, "true");
    HttpServletResponse response = createMockHttpServletResponse();

    Cas20ServiceTicketValidator ticketValidator = PowerMockito.mock(Cas20ServiceTicketValidator.class);

    PowerMockito.mockStatic(ExternalAuthentication.class);
    BDDMockito.given(ExternalAuthentication.startExternalAuthentication(request)).willReturn(E1S1);

    //Prep our object
    ShibcasAuthServlet shibcasAuthServlet = createShibcasAuthServlet();

    //Override the internal Cas20TicketValidator because we don't want it to call a real server
    MemberModifier.field(ShibcasAuthServlet.class, "ticketValidator").set(shibcasAuthServlet, ticketValidator);

    //Passive request/response with no user
    BDDMockito.given(request.getAttribute(ExternalAuthentication.FORCE_AUTHN_PARAM)).willReturn("false");
    BDDMockito.given(request.getAttribute(ExternalAuthentication.PASSIVE_AUTHN_PARAM)).willReturn("true");
    shibcasAuthServlet.doGet(request, response);

    //Verify
    verify(request, never()).setAttribute(eq(ExternalAuthentication.PRINCIPAL_NAME_KEY), any());
    verify(request).setAttribute(ExternalAuthentication.AUTHENTICATION_ERROR_KEY, "NoPassive");
    verify(ticketValidator, never()).validate(anyString(), anyString());
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Test
public void testDoGetForced() throws Exception {
    //Mock some objects.
    HttpServletRequest request = createDoGetHttpServletRequest(CONVERSATION_TICKET, TICKET, null);
    HttpServletResponse response = createMockHttpServletResponse();
    Assertion assertion = createMockAssertion();

    Cas20ServiceTicketValidator ticketValidator = PowerMockito.mock(Cas20ServiceTicketValidator.class);
    PowerMockito.when(ticketValidator.validate(TICKET, URL_WITH_CONVERSATION)).thenReturn(assertion);

    PowerMockito.mockStatic(ExternalAuthentication.class);
    BDDMockito.given(ExternalAuthentication.startExternalAuthentication(request)).willReturn(E1S1);

    //Prep our object
    ShibcasAuthServlet shibcasAuthServlet = createShibcasAuthServlet();

    //Override the internal Cas20TicketValidator because we don't want it to call a real server
    MemberModifier.field(ShibcasAuthServlet.class, "ticketValidator").set(shibcasAuthServlet, ticketValidator);

    //Forced request/response
    BDDMockito.given(request.getAttribute(ExternalAuthentication.FORCE_AUTHN_PARAM)).willReturn("true");
    BDDMockito.given(request.getAttribute(ExternalAuthentication.PASSIVE_AUTHN_PARAM)).willReturn("false");
    shibcasAuthServlet.doGet(request, response);

    //Verify
    verify(request).setAttribute(ExternalAuthentication.PRINCIPAL_NAME_KEY, JDOE);
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Test
public void testDoGetPassiveAndForced() throws Exception {
    //Mock some objects.
    HttpServletRequest request = createDoGetHttpServletRequest(CONVERSATION_TICKET_GATEWAY_ATTEMPTED, TICKET, "true");
    HttpServletResponse response = createMockHttpServletResponse();
    Assertion assertion = createMockAssertion();

    Cas20ServiceTicketValidator ticketValidator = PowerMockito.mock(Cas30ServiceTicketValidator.class);
    PowerMockito.when(ticketValidator.validate(TICKET, URL_WITH_CONVERSATION_GATEWAY_ATTEMPTED)).thenReturn(assertion);

    PowerMockito.mockStatic(ExternalAuthentication.class);
    BDDMockito.given(ExternalAuthentication.startExternalAuthentication(request)).willReturn(E1S1);

    //Prep our object
    ShibcasAuthServlet shibcasAuthServlet = createShibcasAuthServlet();

    //Override the internal Cas30TicketValidator because we don't want it to call a real server
    MemberModifier.field(ShibcasAuthServlet.class, "ticketValidator").set(shibcasAuthServlet, ticketValidator);

    //Passive and forced request/response
    BDDMockito.given(request.getAttribute(ExternalAuthentication.FORCE_AUTHN_PARAM)).willReturn("true");
    BDDMockito.given(request.getAttribute(ExternalAuthentication.PASSIVE_AUTHN_PARAM)).willReturn("true");
    shibcasAuthServlet.doGet(request, response);

    //Verify
    verify(request).setAttribute(ExternalAuthentication.PRINCIPAL_NAME_KEY, JDOE);
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
public Cas20ServiceTicketValidator instantiateValidator()
{
	Cas20ServiceTicketValidator toReturn = new Cas20ServiceTicketValidator(casServiceUrl);
	toReturn.setProxyGrantingTicketStorage(proxyGrantingTicketStorage);
	toReturn.setProxyCallbackUrl(proxyCallbackUrl);
	return toReturn;
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
public void searchExperiment() throws ServerConnectionException, FailedLoginException,
        ClientProtocolException, IOException {
    SearchExperimentsByCriteria experimentSearchCriteria = new SearchExperimentsByCriteria();
    CaArrayServer server = new CaArrayServer(BaseProperties.getServerHostname(),
            BaseProperties.getServerJndiPort());
    server.connect();
    /*
     * Verify anonymous search does not return results.
     */
    experimentSearchCriteria.doSearch(server);

    // Emulate a login from caIntegrator through CAS
    String ticket = login();
    
    /*
     * Validate the ticket.
     */
    try {
        Cas20ServiceTicketValidator v = new Cas20ServiceTicketValidator(BaseProperties.CAS_URL);
        v.validate(ticket, BaseProperties.getServiceURLforCAS());
    } catch (Exception e) {
        System.out.println(e);
    }

    /*
     * To properly authenticate users with CAS information for EJB calls the caArray application requires 2 pieces of information:
     * + The service value that was used at authentication time when the ticket was created
     * + The ticket value that was provided by CAS
     */
    server.connect(BaseProperties.getServiceURLforCAS(), ticket);
    experimentSearchCriteria.doSearch(server);

    /*
     * This shows that in addition to being able to authenticate with CAS the application also provides
     * the capability to authenticate against ldap in an SSO environment.
     */
    server.connect(BaseProperties.CAS_USERNAME, BaseProperties.CAS_USER_CAARRAY_PASSWORD);
    experimentSearchCriteria.doSearch(server);
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Bean
public Cas20ServiceTicketValidator cas20ServiceTicketValidator() {
    return new Cas20ServiceTicketValidator(casProperties.getCasServerUrl());
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Test
public void testRestBasicWithCas20TicketValidator() throws HttpAction, UnsupportedEncodingException {
    final CasRestAuthenticator authenticator = new CasRestAuthenticator(CAS_PREFIX_URL);
    authenticator.setTicketValidator(new Cas20ServiceTicketValidator(CAS_PREFIX_URL));
    internalTestRestBasic(new CasRestBasicAuthClient(authenticator, VALUE, NAME), 0);
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
@Bean
public Cas20ServiceTicketValidator cas20ServiceTicketValidator() {
	return new Cas20ServiceTicketValidator(env.getRequiredProperty(CAS_URL_PREFIX));
}
 

import org.jasig.cas.client.validation.Cas20ServiceTicketValidator; //导入依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public void doFilter(final ServletRequest servletRequest, final ServletResponse servletResponse,
        final FilterChain chain) throws IOException, ServletException {
    final HttpServletRequest request = (HttpServletRequest) servletRequest;
    final HttpServletResponse response = (HttpServletResponse) servletResponse;
    HttpSession session = request.getSession();
    final String ticket = CommonUtils.safeGetParameter(request, getArtifactParameterName());

    if (session != null && session.getAttribute(CONST_CAS_ASSERTION) == null && ticket != null) {
        try {
            final String service = constructServiceUrl(request, response);
            Cas20ServiceTicketValidator v = new Cas20ServiceTicketValidator(casServerUrl);
            v.validate(ticket, service);
            if (!new WebAuthentication().login(service, ticket)) {
                throw new GeneralSecurityException("JBoss Web authentication failed.");
            }
            /*
             * This line of obtaining the session again was necessary as following the login with
             * the WebAuthentication above, the original Session that was obtained was no longer
             * valid.
             */
            session = request.getSession();
            if (request.getUserPrincipal() instanceof AssertionPrincipal) {
                final AssertionPrincipal principal = (AssertionPrincipal) request.getUserPrincipal();
                session.setAttribute(CONST_CAS_ASSERTION, principal.getAssertion());
            } else {
                throw new GeneralSecurityException(
                        "JBoss Web authentication did not produce CAS AssertionPrincipal.");
            }
        } catch (final GeneralSecurityException e) {
            response.sendError(HttpServletResponse.SC_FORBIDDEN, e.getMessage());
        } catch (TicketValidationException tve) {
            response.sendError(HttpServletResponse.SC_FORBIDDEN, tve.getMessage());
        }
    } else if (session != null && request.getUserPrincipal() == null) {
        // There is evidence that in some cases the principal can disappear
        // in JBoss despite a valid session.
        // This block forces consistency between principal and assertion.
        session.removeAttribute(CONST_CAS_ASSERTION);
    }
    chain.doFilter(request, response);
}