CAS單點登錄接入service可以是多的嗎?
也就是說service 參數(shù)是否支持?jǐn)?shù)組?
還有認(rèn)證的服務(wù)必須是https開頭的嗎。為什么http:開頭的就不能了?
走同樣的路,發(fā)現(xiàn)不同的人生
serviceId
支持正則表達式匹配規(guī)則,向如下的表達式即支持https/http
所有的請求。如果這還無法滿足樓主的需求可以自己實現(xiàn)RegisteredService
.
{
"@class" : "org.apereo.cas.services.RegexRegisteredService",
"serviceId" : "^(https|http)://.*",
"name" : "HTTPS and IMAPS",
"id" : 10000001,
"description" : "This service definition authorizes all application urls that support HTTPS and IMAPS protocols.",
"evaluationOrder" : 10000
}
The certification authority service can be configured using http
的方式。修改時注意修改cookie.secure
.
Ticket Granting Cookie
cas.tgc.secure=false
Otherwise, the cookie
setting will not be successful when using http
, because only https can be used when
. secure
is true
http
時cookie
設(shè)置不成功,因為secure
為true
時只能使用https
。
不過現(xiàn)在使用https
也很好,像StartSSL
與其它SSL
廠商也提供了免費的SSL
But it’s also good to use https
now, as StartSSL
and other SSL
vendors also provide free SSL
certificates .
Login has been implemented in cas, and there are 2 modes. We use back-end exit, that is, when the user clicks to log out cas
, it will request the corresponding application server to exit. cas
會請求對應(yīng)的應(yīng)用服務(wù)器進行退出。
SingleSignOutFilter
其實就是在請求地址上增加一個特殊
的參數(shù),filter
SingleSignOutFilter
special
parameter to the request address. If filter
finds this parameter, it will log out in the current application. ??