import org.jasig.cas.client.util.AbstractCasFilter; //导入依赖的package包/类
/**
 * Crea principal a traves de la request
 */
protected CasPrincipal retrievePrincipalFromSessionOrRequest(final ServletRequest servletRequest) {
    final HttpServletRequest request = (HttpServletRequest) servletRequest;
    final HttpSession session = request.getSession(false);
    final Assertion assertion = (Assertion) (session == null ? request.getAttribute(AbstractCasFilter.CONST_CAS_ASSERTION) : session.getAttribute(AbstractCasFilter.CONST_CAS_ASSERTION));
    
    if (assertion == null){
    	return null;
    }else{
    	List<String> roles = new ArrayList<String>();
    	String apellidosNombre,nif,listaRoles;
    	char metodoAutenticacion;
    	
    	// Recuperamos info de CAS
    	AttributePrincipal ap = assertion.getPrincipal();
    	apellidosNombre = (String) ap.getAttributes().get(this.nombreAttribute);
    	nif = (String) ap.getAttributes().get(this.nifAttribute);
    	metodoAutenticacion = ((String) ap.getAttributes().get(this.metodoAutenticacionAttribute)).charAt(0);
    	
    	// Obtenemos lista de roles
    	if (this.rolesAttribute.equals("INTERNAL")){
    		// Roles no est�n centralizados en CAS. Los obtenemos del autenticador.
    		roles = autenticador.obtenerRoles(props,ap.getName());
    		
    	}else{
    		// Roles centralizados en CAS
    		listaRoles = (String) ap.getAttributes().get(this.rolesAttribute);
        	if (listaRoles != null && listaRoles.length() > 0){
	        	String[] rs = listaRoles.split(":");        	
	        	for (int i=0;i<rs.length;i++){
	        		roles.add(rs[i]);
	        	}
        	}
    	}
    	
    	return new CasPrincipal(ap.getName(),apellidosNombre,nif,metodoAutenticacion,roles);
    	
    }
    
}
 

import org.jasig.cas.client.util.AbstractCasFilter; //导入依赖的package包/类
static String get_CAS_userId(HttpServletRequest request) {
    HttpSession session = request.getSession(false);
    Assertion assertion = (Assertion) (session == null ? request
                                       .getAttribute(AbstractCasFilter.CONST_CAS_ASSERTION) : session
                                       .getAttribute(AbstractCasFilter.CONST_CAS_ASSERTION));
    return assertion == null ? null : assertion.getPrincipal().getName();
}
 

import org.jasig.cas.client.util.AbstractCasFilter; //导入依赖的package包/类
public void doFilter(ServletRequest request, ServletResponse response,FilterChain filterChain) throws IOException, ServletException {
	HttpSession session = ((HttpServletRequest) request).getSession();
	Boolean isSessionLoaded = (Boolean) session.getAttribute(WebSSOConstants.IS_SESSION_ATTRIBUTES_LOADED);
	if (null == isSessionLoaded || isSessionLoaded == Boolean.FALSE) {
		Assertion assertion = (Assertion) session.getAttribute(AbstractCasFilter.CONST_CAS_ASSERTION);
		AttributePrincipal attributePrincipal = assertion.getPrincipal();
		String attributesString = attributePrincipal.getName();
		log.debug("User Principal retrived from WebSSO-server:  "+attributesString);
		loadSessionAttributes(attributesString,session);
		session.setAttribute(WebSSOConstants.IS_SESSION_ATTRIBUTES_LOADED, Boolean.TRUE);			
	}
	filterChain.doFilter(request, response);
}
 

import org.jasig.cas.client.util.AbstractCasFilter; //导入依赖的package包/类
@Test
public void testAssertion() throws Exception {
    session.setAttribute(AbstractCasFilter.CONST_CAS_ASSERTION, new AssertionImpl("test"));
    this.filter.doFilter(request, response, filterChain);

    assertNull(response.getRedirectedUrl());
}
 

import org.jasig.cas.client.util.AbstractCasFilter; //导入依赖的package包/类
protected Principal retrievePrincipalFromSessionOrRequest(ServletRequest servletRequest) {
	final HttpServletRequest request = (HttpServletRequest) servletRequest;
       final HttpSession session = request.getSession(false);
       final Assertion assertion = (Assertion) (session == null ? request.getAttribute(AbstractCasFilter.CONST_CAS_ASSERTION) : session.getAttribute(AbstractCasFilter.CONST_CAS_ASSERTION));
       return assertion == null ? null : assertion.getPrincipal();
}