帶有CAS和表單的彈簧安全登錄

我正在編寫一個應用程序，需要爲員工使用CAS認證，併爲用戶提供用戶名/密碼錶單登錄（用於驗證數據庫表）。帶有CAS和表單的彈簧安全登錄

這個想法是首頁將有一個鏈接，將他們發送給CAS的員工（「請點擊這裏，如果你是一名員工」），並在該用戶名下面輸入密碼框&。

我都在單獨的測試應用程序中工作 - 基於Spring Security中的示例應用程序 - 但我不清楚如何將兩個AuthenticationProviders合併爲一個。

當前配置 - 主要來自CAS配置使用表單配置補充說：

<?xml version="1.0" encoding="UTF-8"?> 
<beans xmlns="http://www.springframework.org/schema/beans" 
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
     xmlns:security="http://www.springframework.org/schema/security" 

     xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd 
          http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd"> 



    <!--Set up the url based security features--> 
    <security:http entry-point-ref="casEntryPoint" use-expressions="true" > 
     <security:custom-filter position="FORM_LOGIN_FILTER" ref="casFilter" /> 
     <security:logout logout-success-url="${cas.sso}/logout" /> 
     <security:access-denied-handler ref="accessDeniedHandler" /> 

<!-- Set up the form login --> 
     <security:form-login login-page="/login.jsp" authentication-failure-  url="/login.jsp?login_error=1"/> 

    </security:http> 

    <!-- Specify a destinatation for 403 errors raised by the above URL patterns 
     this is performed as a 'forward' internally --> 
    <bean id="accessDeniedHandler" 
      class="org.springframework.security.web.access.AccessDeniedHandlerImpl"> 
     <property name="errorPage" value="/error/403.html"/> 
    </bean> 

    <!--Hook in the properties for the CAS--> 
    <bean id="serviceProperties" class="org.springframework.security.cas.ServiceProperties"> 
     <property name="service" value="${cas.service}"/> 
     <property name="sendRenew" value="true"/> 
    </bean> 

    <!--Set up the CAS filter--> 
    <bean id="casFilter" 
      class="org.springframework.security.cas.web.CasAuthenticationFilter"> 
     <property name="authenticationManager" ref="authenticationManager"/> 
     <property name="authenticationFailureHandler" ref="accessFailureHandler" /> 
    </bean> 

    <!-- Specify a destinatation for 401 errors raised by casFilter (and UserService) --> 
    <bean id='accessFailureHandler' 
      class="org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler"> 
     <property name="defaultFailureUrl" value="/error/401.html" /> 
     <property name="useForward" value='true' /> 
     <property name="allowSessionCreation" value="false" /> 
    </bean> 

    <!--Set up the entry point for CAS--> 
    <bean id="casEntryPoint" 
      class="org.springframework.security.cas.web.CasAuthenticationEntryPoint"> 
     <property name="loginUrl" value="${cas.sso}"/> 
     <property name="serviceProperties" ref="serviceProperties"/> 
     <property name="encodeServiceUrlWithSessionId" value="false"/> 
    </bean> 

    <!--Setup authentication managers--> 
    <security:authentication-manager alias="authenticationManager"> 
     <security:authentication-provider ref="casAuthenticationProvider"/> 
     <security:authentication-provider ref="customAuthenticationProvider"/> 
    </security:authentication-manager> 

    <!-- Our own user details service, which hooks in to the database --> 
    <bean id='userService' class='test.security.UserDetailsServiceImpl' /> 

    <!-- Enable annotations --> 
    <security:global-method-security pre-post-annotations="enabled"/> 

    <!-- Customise an auth provider with the local specifics--> 
    <bean id="casAuthenticationProvider" 
      class="org.springframework.security.cas.authentication.CasAuthenticationProvider"> 
     <property name="userDetailsService" ref="userService"/> 
     <property name="serviceProperties" ref="serviceProperties"/> 
     <property name="ticketValidator"> 
      <bean class="org.jasig.cas.client.validation.Cas20ServiceTicketValidator"> 
       <constructor-arg index="0" value="${cas.sso}"/> 
      </bean> 
     </property> 
     <property name="key" value="testSSO"/> 
    </bean> 

<!-- Custom auth provider that validates usernames&pwds against DB --> 
    <bean id="customAuthenticationProvider" class="test.security.CustomAuthenticationProvider" />  

</beans>

這給了錯誤消息：

Filter beans '<casFilter>' and '<org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter#0>' have the same 'order' value.

我怎樣才能把兩個過濾器進入連鎖？或者是否需要編寫自己的過濾器（以某種方式？）知道選擇了哪種方法，然後委派相關的特定過濾器？

我是Spring Security的新手，那麼有沒有更好的方法來完成這一切？

謝謝！

來源

2014-01-09 Mark

casFilter必須放置在位置= CAS_FILTER

來源

2014-11-26 06:34:45

帶有CAS和表單的彈簧安全登錄

回答

相關問題