今天自己寫SSO(單點登入)發現一些問題的總結

1。因為原先有攔截器inteceptor,所以想著就直接用攔截器搞好了，後來發現不行，

原因是：工程預設是/訪問，是在web中配置預設的，並沒有呼叫任何方法（而攔截器是攔截方法的），所以無論我修改spring配置檔案，修改攔截條件都始終攔截不上

所以個人感覺，登入這種操作應該是在filter來搞，因為過濾器（過濾一切請求，即便是還沒有登入）

2.所以改用filter過濾器

	public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,
			FilterChain filterChain) throws IOException, ServletException {
		 	HttpServletRequest request = (HttpServletRequest) servletRequest;
	        HttpServletResponse response = (HttpServletResponse) servletResponse;
	        
	        String urlString = request.getRequestURI();
	        System.out.println("client請求連結："+urlString);
	        if(urlString.contains("css")||urlString.contains("js")){
	        	filterChain.doFilter(servletRequest, servletResponse);
	        	return;
	        }
	        HttpSession session = request.getSession();
	        String username = (String) session.getAttribute("username");
	        
	        String ticket = request.getParameter("ticket");
	        String url = URLEncoder.encode(request.getRequestURL().toString(), "UTF-8");

	        if (null == username) {  
	            if (null != ticket && !"".equals(ticket)) {  
	            	JSONObject jsonObject = httpRequest("http://localhost:8080/yxy_author/ticketService?ticket="+ticket, "GET");
	            	if(jsonObject!=null){
	            		username = (String) jsonObject.getJSONObject("data").get("username");
	            	}
	                if (null != username && !"".equals(username)) {  
	                    session.setAttribute("username", username);  
	                    filterChain.doFilter(request, response);  
	                } else {  
	                    response.sendRedirect("http://localhost:8080/yxy_author/login?service=" + url);  
	                }  
	            } else {  
	                response.sendRedirect("http://localhost:8080/yxy_author/login?service=" + url);  
	            }  
	        } else {  
	            filterChain.doFilter(request, response);  
	        } 
	}
 

記得配置web.xml中新增這個過濾器

   <filter>  
        <filter-name>ssoClientFilter</filter-name>  
        <filter-class>com.cyt.babyhealth.tj.filter.SSOClientFilter</filter-class>  
    </filter>  
    <filter-mapping>  
        <filter-name>ssoClientFilter</filter-name>  
        <url-pattern>/*</url-pattern>  
    </filter-mapping>  
    
 

============================下面是授權服務工程程式碼==============================================

SSOServerFilter程式碼

public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,
			FilterChain filterChain) throws IOException, ServletException {
		// TODO Auto-generated method stub
		 	
			HttpServletRequest request = (HttpServletRequest) servletRequest;
	        HttpServletResponse response = (HttpServletResponse) servletResponse;
	        
	        String test = ((HttpServletRequest) servletRequest).getServletPath();
	        
	        
	        String urlString = request.getRequestURI();
	        System.out.println("service請求連結："+urlString);
	        if("/yxy_author/login".equals(urlString)||"/yxy_author/ticketService".equals(urlString)||urlString.contains("css")||urlString.contains("js")){
	        	filterChain.doFilter(servletRequest, servletResponse);
	        	return;
	        }
	        
	        String service = request.getParameter("service");
	        String ticket = request.getParameter("ticket");
	        Cookie[] cookies = request.getCookies();
	        String username = "";
	        if (null != cookies) {
	            for (Cookie cookie : cookies) {
	                if ("sso".equals(cookie.getName())) {
	                    username = cookie.getValue();
	                    break;
	                }
	            }
	        }

	        if (null == service && null != ticket) {
	            filterChain.doFilter(servletRequest, servletResponse);
	        }

	        if (null != username && !"".equals(username)) {
	        	
	        	System.out.println("service使用者名稱："+username);
	        	
	            long time = System.currentTimeMillis();
	            String timeString = username + time;
	            MemCached memCached = (MemCached) SpringUtil.getBean("memcachedClient");
	            memCached.set(timeString, 1000,username);
	            StringBuilder url = new StringBuilder();
	            if(service!=null){
	            	url.append(service);
	            	
	            	if (0 <= service.indexOf("?")) {
	            		url.append("&");
	            	} else {
	            		url.append("?");
	            	}
	            	url.append("ticket=").append(timeString);
	            	
	            }
	            response.sendRedirect(url.toString());
	            
	        } else {
	        		filterChain.doFilter(servletRequest, servletResponse);
	        }
		
	}
 

授權中心login

@RequestMapping(value = "/ticketService")
	@ResponseBody
	public ApiResult  ticketService(HttpServletRequest request, HttpServletResponse response){
		ApiResult apiResult = new ApiResult();
		
		String ticket = request.getParameter("ticket");
        String username = memcachedClient.get(ticket);
        memcachedClient.delete(ticket);
        
//        Object  customVO   = memcachedClient.get(ticket+".user");
//        memcachedClient.delete(ticket+".user");
        
        
        Map<String, Object> data = new HashMap<String, Object>();
        data.put("username",username);
//        data.put("customVO", customVO);
        apiResult.setData(data);

		
		return apiResult;
		
	}
	/**
	 * @param loginname
	 * @param pwd
	 * @return 登入
	 * @throws IOException 
	 */
	@RequestMapping(value = "/login")
	public String login(@RequestParam(required = false) String loginname,
			@RequestParam(required = false) String pwd,
			String service,HttpServletResponse response) throws IOException {
        
		if(loginname!=null&&loginname.trim().length()>0&&pwd!=null&&pwd.trim().length()>0){
			ImCustom admin = imCustomService.findLoginName(loginname);
			if (admin != null) {
				if(admin.getStatus() == 1){
					if (admin.getPwd().equals(MD5.sign(pwd + PropertiesUtil.config.get("md5.key")))) {
						if (admin.getStatus() == 1) {
							
						
							
							String sysIds = admin.getSysIds();
							
							List<AdminAuthorSys> adminAuthorSys = new ArrayList<AdminAuthorSys>();
							String[] sysIdsArrStrings = sysIds.split(",");
							
							for (int i = 0; i < sysIdsArrStrings.length; i++) {
								String sysIdString = sysIdsArrStrings[i];
								AdminAuthorSys adminAuthorSyss = adminAuthorSysService.find(Integer.parseInt(sysIdString));
								adminAuthorSys.add(adminAuthorSyss);
							}
							ImCustomVO  customVO = new ImCustomVO();
							BeanUtils.copyProperties(admin, customVO);
							customVO.setAdminSyses(adminAuthorSys);
							
							ServletContext ContextA =getSession().getServletContext();
							ContextA.setAttribute("session",getSession() );
							getSession().setAttribute("admin", customVO);//這樣儲存只能在當前應用內看
							
							
							System.out.println("44444444444444444444444444444444");
							//設定cookie
							  Cookie cookie = new Cookie("sso", admin.getUname());
							  cookie.setPath("/");
							  response.addCookie(cookie);
							//admin1503379134793 admin
					        //admin1503379134793.user	 [email protected]		            
					            long time = System.currentTimeMillis();
					            String timeString = admin.getUname() + time;
					            memcachedClient.set(timeString, 10000, admin.getUname());
					            
//					            JSONObject.toJSON(customVO);
					          //要想在應用外用，則需要session共享，放在memcached中
//								memcachedClient.set(timeString+".user", 10000, JSONObject.toJSON(customVO));
					            if (null != service) {
					            	StringBuilder url = new StringBuilder();
					            	url.append(service);
					            	if (0 <= service.indexOf("?")) {
					            		url.append("&");
					            	} else {
					            		url.append("?");
					            	}
					            	url.append("ticket=").append(timeString);
					            	response.sendRedirect(url.toString());
					            	return null;
					            }else {
					            	response.sendRedirect("/yxy_author/index.jsp");
					            	return null;
								}
							
						} else {
							getRequest().setAttribute("error", "該使用者禁止登入");
						}
					} else {
						getRequest().setAttribute("error", "密碼錯誤");
					}
				}else{
					getRequest().setAttribute("error", "使用者已被禁止");
				}
			} else {
					getRequest().setAttribute("error", "該使用者不存在");
			}
		}
		return "/login";
	}

	/**
	 * @return 退出登入
	 */
	@RequestMapping(value = "/logout")
	public String logout() {

		getSession().invalidate();

		return "/login";
	}
	

最後記得web.xml配置

    <filter>  
        <filter-name>ssoServerFilter</filter-name>  
        <filter-class>com.cyt.babyhealth.tj.filter.SSOServerFilter</filter-class>  
    </filter>  
    <filter-mapping>  
        <filter-name>ssoServerFilter</filter-name>  
        <url-pattern>/*</url-pattern>  
    </filter-mapping>