首页 / JAVA / 具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中

具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中

内容导读

互联网集市收集整理的这篇技术教程文章主要介绍了具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中，小编现在分享给大家，供广大互联网技能从业者学习和参考。文章包含14575字，纯文字阅读大概需要21分钟。

内容图文

具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中

我已经在这个问题上停留了大约两天了.我有一个CAS 4应用程序和一个在Tomcat 8上运行的支持Spring的(MVC和安全性)Web应用程序.我正在尝试针对CAS服务器进行身份验证.所有设置工作都很好,但是一旦我似乎已通过身份验证(凭票证)并尝试重定向,我就会得到此网页具有重定向循环,ERR_TOO_MANY_REDIRECTS.我正在使用来自CAS 4的默认内存中身份验证(用户：casuser,密码：Mellon)

我努力了：

1)为casAuthenticationFilter上下文路径(/ test / j_spring_cas_security_check)使用不同的前缀,并在serviceProperties中使用匹配的前缀(serviceProperties.setService(“ https://OFB25572D8.OKFB.COM:8443/phoenixWeb/test/j_spring_cas_security_check”)； )

>从自定义SavedRequestAwareAuthenticationSuccessHandler重定向到我的contextRoot并覆盖

onAuthenticationSuccess(HttpServletRequest请求,
HttpServletResponse响应,身份验证)

>转到Spring MVC 3.2.8和Spring Security 3.2.8(有人遇到类似的问题,并转到较旧的Spring版本)

这是设置(没有web.xml,所有操作都使用Java Config完成)：

SecurityConfig.java

@Configuration
@EnableWebSecurity

public class PhoenixSecurityConfig extends WebSecurityConfigurerAdapter {

     @Bean
    public ServiceProperties serviceProperties() {
        ServiceProperties serviceProperties = new ServiceProperties();
        serviceProperties.setService("https://OFB25572D8.OKFB.COM:8443/phoenixWeb/j_spring_cas_security_check");
        serviceProperties.setSendRenew(false);
        return serviceProperties;
    }

    @Bean
    public CasAuthenticationProvider casAuthenticationProvider() {
        CasAuthenticationProvider casAuthenticationProvider = new CasAuthenticationProvider();
        casAuthenticationProvider.setAuthenticationUserDetailsService(authenticationUserDetailsService());
        casAuthenticationProvider.setServiceProperties(serviceProperties());
        casAuthenticationProvider.setTicketValidator(cas20ServiceTicketValidator());
        casAuthenticationProvider.setKey("phoenixWeb_CAS_ID");
        return casAuthenticationProvider;
    }

    @Bean
    public AuthenticationUserDetailsService authenticationUserDetailsService() {
        return new TestCasAuthenticationUserDetailsService();
    }

    @Bean
    public Cas20ServiceTicketValidator cas20ServiceTicketValidator() {
        return new Cas20ServiceTicketValidator("https://OFB25572D8.OKFB.COM:8443/cas");
    }

    @Bean
    public CasAuthenticationFilter casAuthenticationFilter() throws Exception {
        CasAuthenticationFilter casAuthenticationFilter = new CasAuthenticationFilter();
        casAuthenticationFilter.setAuthenticationManager(authenticationManager());
        casAuthenticationFilter.setAuthenticationSuccessHandler(customSuccessHandler());
        casAuthenticationFilter.setFilterProcessesUrl("/j_spring_cas_security_check");
        return casAuthenticationFilter;
    }

    @Bean
    public SavedRequestAwareAuthenticationSuccessHandler customSuccessHandler() {
        return new CustomRequestHandler();
    }

    @Bean
    public CasAuthenticationEntryPoint casAuthenticationEntryPoint() {
        CasAuthenticationEntryPoint casAuthenticationEntryPoint = new CasAuthenticationEntryPoint();
        casAuthenticationEntryPoint.setLoginUrl("https://OFB25572D8.OKFB.COM:8443/cas/login");
        casAuthenticationEntryPoint.setServiceProperties(serviceProperties());
        return casAuthenticationEntryPoint;
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {

         http
             .addFilter(casAuthenticationFilter());
         http
             .exceptionHandling()
                 .authenticationEntryPoint(casAuthenticationEntryPoint());

        http.authorizeRequests().antMatchers("/**").access("hasRole('ROLE_USER')");
            //.anyRequest().permitAll()
            //.and().csrf().csrfTokenRepository(csrfTokenRepository()).and();
            //.and().csrf().disable()
        //.formLogin()
        //.loginPage("/login")
        //.permitAll();
        //Below is forcing over HTTPS
        //.and().requiresChannel().anyRequest().requiresSecure();

    }

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth
            .authenticationProvider(casAuthenticationProvider());
    }

}

TestCasAuthenticationUserDetailsS??ervice.java

public class TestCasAuthenticationUserDetailsService implements AuthenticationUserDetailsService {
    @Override
    public UserDetails loadUserDetails(Authentication token) throws UsernameNotFoundException {
        List<GrantedAuthority> authorities = new ArrayList<>();
        authorities.add(new SimpleGrantedAuthority("ROLE_USER"));
        return new User("casuser", "Mellon", authorities);
    }
}

pom.xml

<dependencies>
    <dependency>
        <groupId>org.springframework</groupId>
        <artifactId>spring-webmvc</artifactId>
        <version>4.2.2.RELEASE</version>
    </dependency> 
    <dependency>
        <groupId>org.springframework</groupId>
        <artifactId>spring-orm</artifactId>
        <version>4.2.2.RELEASE</version>
    </dependency>
    <dependency>
        <groupId>org.springframework.data</groupId>
        <artifactId>spring-data-jpa</artifactId>
        <version>1.9.1.RELEASE</version>
    </dependency>
    <dependency>
        <groupId>org.springframework.security</groupId>
        <artifactId>spring-security-web</artifactId>
        <version>4.0.3.RELEASE</version>
    </dependency>
    <dependency>
         <groupId>org.springframework.security</groupId>
         <artifactId>spring-security-config</artifactId>
         <version>4.0.3.RELEASE</version>
    </dependency>
    <dependency>
         <groupId>org.springframework.security</groupId>
         <artifactId>spring-security-ldap</artifactId>
         <version>4.0.3.RELEASE</version>
    </dependency>        
    <dependency>
        <groupId>org.springframework.security</groupId>
        <artifactId>spring-security-cas-client</artifactId>
        <version>3.0.8.RELEASE</version>
    </dependency>   
  </dependencies>

对Web应用程序的初始请求

Request URL:https://ofb25572d8.okfb.com:8443/phoenixWeb
Request Method:GET
Status Code:302 Found
Remote Address:10.1.24.71:8443
**Response Headers**
view source
Cache-Control:no-cache, no-store, max-age=0, must-revalidate
Content-Length:0
Date:Wed, 30 Dec 2015 19:20:14 GMT
Expires:0
Location:https://OFB25572D8.OKFB.COM:8443/cas/login?service=https%3A%2F%2FOFB25572D8.OKFB.COM%3A8443%2FphoenixWeb%2Fj_spring_cas_security_check
Pragma:no-cache
Server:Apache-Coyote/1.1
Set-Cookie:JSESSIONID=3BEED4D08DA6EF00EDBCB87B7930D521; Path=/phoenixWeb/; Secure; HttpOnly
Strict-Transport-Security:max-age=31536000 ; includeSubDomains
X-Content-Type-Options:nosniff
X-Frame-Options:DENY
X-XSS-Protection:1; mode=block
**Request Headers**
view source
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding:gzip, deflate, sdch
Accept-Language:en-US,en;q=0.8
Connection:keep-alive
Host:ofb25572d8.okfb.com:8443
Upgrade-Insecure-Requests:1
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36

一旦我按提交

Request URL:https://ofb25572d8.okfb.com:8443/cas/login;jsessionid=988CBFBD15B4FE7562C8A5D4A3ADBE70?service=https%3A%2F%2FOFB25572D8.OKFB.COM%3A8443%2FphoenixWeb%2Fj_spring_cas_security_check
Request Method:POST
Status Code:302 Found
Remote Address:10.1.24.71:8443
**Response Headers**
view source
Cache-Control:no-cache
Cache-Control:no-store
Content-Length:0
Date:Wed, 30 Dec 2015 19:22:53 GMT
Expires:Thu, 01 Jan 1970 00:00:00 GMT
Location:https://OFB25572D8.OKFB.COM:8443/phoenixWeb/j_spring_cas_security_check?ticket=ST-1-LhfIkMXSX2iTmpRAKaXc-cas01.example.org
Pragma:no-cache
Server:Apache-Coyote/1.1
Set-Cookie:CASPRIVACY=""; Path=/cas/; Secure; HttpOnly
Set-Cookie:TGC=eyJhbGciOiJIUzUxMiJ9.ZXlKaGJHY2lPaUprYVhJaUxDSmxibU1pT2lKQk1USTRRMEpETFVoVE1qVTJJbjAuLndXYV9rNTVNRWVMWHNXdjlCWW1qVGcuVjFGM1VqWF93THVQWFBpbnBUaW9lRWRyS2p0QnNRODJwNG5INnRCZTlUYVJORk00QUprbVlRYlI0c2l3SFpJeHVCc0R6ZkZVdnlSaVhNekpkSURBaXQtazhpNkl2NEhUUjlyVzY1T1E1YmZ6VUEwX3JKOWdvLXNaNE5hTm9WTTNtSGVDalBsdGtFaVVUNXAxWGhYWVh5U25rZlQwaGxXLTJXVEZLZ0U3LXZQLVd2SVNCLTFtaHRjLWl6U2VfUWhrVS00RnZ1QWdOM2lZN2JvTGJ4c3VLMEE5RFBWM2xxZ2xncWtCQld2eW1PMkxKcm5fSGZ6aXdDeDdmS2N2Sjk1UlA1clIxaWs2Sk5VSTk2dEktUEtiS2cuSzl4YjM2aVY0Q0RfRDQtVWhDSzgzUQ.1KHCed4LP-E1VHN8nxTIoligha0yGYP-aAfbuIVkVPbbb2o5PiLdFrS3gbmuGLEApEXJpPcCExOcjYaLRNw8tg; Path=/cas/; Secure; HttpOnly
**Request Headers**
view source
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding:gzip, deflate
Accept-Language:en-US,en;q=0.8
Cache-Control:max-age=0
Connection:keep-alive
Content-Length:2894
Content-Type:application/x-www-form-urlencoded
Cookie:JSESSIONID=988CBFBD15B4FE7562C8A5D4A3ADBE70
Host:ofb25572d8.okfb.com:8443
Origin:https://ofb25572d8.okfb.com:8443
Referer:https://ofb25572d8.okfb.com:8443/cas/login?service=https%3A%2F%2FOFB25572D8.OKFB.COM%3A8443%2FphoenixWeb%2Fj_spring_cas_security_check
Upgrade-Insecure-Requests:1
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36
Query String Parameters
view source
view URL encoded
service:https://OFB25572D8.OKFB.COM:8443/phoenixWeb/j_spring_cas_security_check
Form Data
view source
view URL encoded
username:casuser
password:Mellon
lt:LT-1-3c6Q2CbmBx2YdWkQDM9fxHkWnc7AQJ-cas01.example.org
execution:a1757b02-69fc-46c7-a997-1b747ea87038_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
_eventId:submit
submit:LOGIN

票证授予后

Request URL:https://ofb25572d8.okfb.com:8443/phoenixWeb/j_spring_cas_security_check?ticket=ST-1-LhfIkMXSX2iTmpRAKaXc-cas01.example.org
Request Method:GET
Status Code:302 Found
Remote Address:10.1.24.71:8443
**Response Headers**
view source
Cache-Control:no-cache, no-store, max-age=0, must-revalidate
Content-Length:0
Date:Wed, 30 Dec 2015 19:24:29 GMT
Expires:0
Location:https://ofb25572d8.okfb.com:8443/phoenixWeb
Pragma:no-cache
Server:Apache-Coyote/1.1
Strict-Transport-Security:max-age=31536000 ; includeSubDomains
X-Content-Type-Options:nosniff
X-Frame-Options:DENY
X-XSS-Protection:1; mode=block
**Request Headers**
view source
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding:gzip, deflate, sdch
Accept-Language:en-US,en;q=0.8
Cache-Control:max-age=0
Connection:keep-alive
Cookie:JSESSIONID=3BEED4D08DA6EF00EDBCB87B7930D521
Host:ofb25572d8.okfb.com:8443
Referer:https://ofb25572d8.okfb.com:8443/cas/login?service=https%3A%2F%2FOFB25572D8.OKFB.COM%3A8443%2FphoenixWeb%2Fj_spring_cas_security_check
Upgrade-Insecure-Requests:1
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36
Query String Parameters
view source
view URL encoded
ticket:ST-1-LhfIkMXSX2iTmpRAKaXc-cas01.example.org

当我应该通过身份验证并显示主页时

Request URL:https://ofb25572d8.okfb.com:8443/phoenixWeb
Request Method:GET
Status Code:302 Found
Remote Address:10.1.24.71:8443
**Response Headers**
view source
Cache-Control:no-cache, no-store, max-age=0, must-revalidate
Content-Length:0
Date:Wed, 30 Dec 2015 19:24:29 GMT
Expires:0
Location:https://OFB25572D8.OKFB.COM:8443/cas/login?service=https%3A%2F%2FOFB25572D8.OKFB.COM%3A8443%2FphoenixWeb%2Fj_spring_cas_security_check
Pragma:no-cache
Server:Apache-Coyote/1.1
Set-Cookie:JSESSIONID=9A60C50821E55B52CAA138B9233B305F; Path=/phoenixWeb/; Secure; HttpOnly
Strict-Transport-Security:max-age=31536000 ; includeSubDomains
X-Content-Type-Options:nosniff
X-Frame-Options:DENY
X-XSS-Protection:1; mode=block
**Request Headers**
view source
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding:gzip, deflate, sdch
Accept-Language:en-US,en;q=0.8
Cache-Control:max-age=0
Connection:keep-alive
Host:ofb25572d8.okfb.com:8443
Referer:https://ofb25572d8.okfb.com:8443/cas/login?service=https%3A%2F%2FOFB25572D8.OKFB.COM%3A8443%2FphoenixWeb%2Fj_spring_cas_security_check
Upgrade-Insecure-Requests:1
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36

解决方法:

我终于能够找出为什么我遇到了重定向循环错误.问题是当我发出初始请求时,Spring在SAVED_REQUEST会话属性中为servletPath提供了一个空字符串.

初始网址为：

https://server:8443/contextPath

我的Spring控制器具有一个类级别的根映射到“ /”.我对该应用程序的安全设置是：

http.authorizeRequests().antMatchers("/**").access("hasRole('ROLE_USER')");

因此,考虑到这一点,当我发出初始请求时,servletPath是一个空字符串“”(我成功扩展了SavedRequestAwareAuthenticationSuccessHandler的名称,以在成功登录后观察重定向),并且由于没有映射到casFilter试图重新进行身份验证一遍又一遍的请求.

如果我在网址末尾使用斜杠,则一切正常：

https://server:8443/contextPath/      //NOTE the slash in the end

因此,对于那些存在类似问题的用户,所有配置和设置的外观和行为均正确,但仍获得重定向循环,请检查您的RequestMappings和您要进行身份验证的URL！

内容总结

以上是互联网集市为您收集整理的具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中全部内容，希望文章能够帮你解决具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中所遇到的程序开发问题。如果觉得互联网集市技术教程内容还不错，欢迎将互联网集市网站推荐给程序员好友。

内容备注

版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容，请发送邮件至 gblab@vip.qq.com 举报，一经查实，本站将立刻删除。

内容手机端

扫描二维码推送至手机访问。

本文链接：https://qyyshop.com/info/663372.html

来源：【匿名】

【上一篇】java-杰克逊序列化忽略时区【下一篇】JAVA/JSP学习系列之五

更多 ►

【具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中】教程文章相关的互联网学习教程文章

解决 java.security.cert.CertificateException: java.lang.IllegalArgumentException: Invalid input to toASCII:

使用 okhttp3 ,请求一个 https 网站报错 , 类似这种 https://test_test.test.com ,百度不到问题所以我写了这篇给中文世界贡献一下如何解决还是要学好英语.......https://stackoverflow.com/questions/51563859/javax-net-ssl-sslhandshakeexception-java-lang-illegalargumentexception-invalid 嗯把域名里面的 _ 下划线变成 - 就行了原文：https://www.cnblogs.com/cheerupforyou/p/11364407.html

抛出java.security.InvalidKeyException: Illegal key size

使用FlexiEC的Provider来做ECIES加密时，发现IESParameterSpec在配置完参数后，代码会抛出java.security.InvalidKeyException: Illegal key size，感觉应该是JCE的问题，于是查关于JCE的资料发现：Illegal key size or default parameters是指密钥长度是受限制的，java运行时环境读到的是受限的policy文件。文件位于${java_home}/jre/lib/security这种限制是因为美国对软件出口的控制。解决办法：去掉这种限制需要下载Java Cryptog...

Tomcat启动报java.security.InvalidKeyException:illegal Key Size

背景：最近在搭建公司的一个服务，需要用到tomcat,可以启动tomcat之后，日志总是报错。 java.security.InvalidKeyException:illegal Key Size。查了一下，这是一个java加解密的问题。我按照网上的方法，下载了JCE_policy文件，放上去之后还是报这样的错误。注意：因为安装的JDK版本不一样所造成的，JCE_policy版本要跟JDK版本匹配。网上说到的都是JDK1.6版本。我安装的是JDK1.7版本。这是因为用到了jdk sercurity, 而jdk ser...

java程序中访问https时，报 PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target【代码】

在java中使用https访问数据时报异常：Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target需要使用keytool工具，将对应域名的证书导入到jdk的cacerts中，这个证书可以是*.crt，*.cer等证书cacerts包含了很多CA证书，位置在Java的安装目录： Java\jdk1.8.0_181\jre\lib\...

java.security.InvalidKeyException: Illegal key size【图】

今天在使用idea打包maven项目时，出现这个错误：java.security.InvalidKeyException: Illegal key size。（测试也可能会出现这个问题）貌似是因为加密出现了问题。产生错误原因：为了数据代码在传输过程中的安全，很多时候我们都会将要传输的数据进行加密，然后等对方拿到后再解密使用。我们在使用AES加解密的时候，在遇到128位密钥加解密的时候，没有进行什么特殊处理；然而，在使用256位密钥加解密的时候，如果不进行特殊处理的话...

异常： java.security.InvalidKeyException: Illegal key size【代码】

今天在做接口测试的时候遇到个异常： java.security.InvalidKeyException: Illegal key size。 SecretKeySpec secretKeySpec = new SecretKeySpec(aesKey, "AES");Cipher cipher = Cipher.getInstance("AES/CTR/NoPadding");IvParameterSpec ips = createCtrIv(nonce);cipher.init(1, secretKeySpec, ips);　　　　//当代码运行到这一行时就报错了。爆出上面的异常感到一脸懵逼，还好网络是万能的，百度一下，简单对比一下...

spring security4.2.2的maven配置+spring-security配置详解+java源码+数据库设计【代码】

最近项目需要添加权限拦截，经讨论决定采用spring security4.2.2！废话少说直接上干货！若有不正之处，请谅解和批评指正，不胜感激！！！！！ spring security 4.2.2文档：http://docs.spring.io/spring-security/site/docs/4.2.2.RELEASE/reference/htmlsingle/#el-access-web spring security 3 中文2文档：http://www.mossle.com/docs/auth/html/index.html 需要在pom.xml里配置spring security的依赖，可...

AES加密时抛出java.security.InvalidKeyException: Illegal key size or def

原文:AES加密时抛出java.security.InvalidKeyException: Illegal key size or def 使用AES加密时，当密钥大于128时，代码会抛出java.security.InvalidKeyException: Illegal key size or default parametersIllegal key size or default parameters是指密钥长度是受限制的，java运行时环境读到的是受限的policy文件。文件位于${java_home}/jre/lib/security这种限制是因为美国对软件出口的控制。解决办法：去掉这种限制需要下载Ja...

.Net调用Java端带有WS-Security支持的Web Service【亲测通过】【代码】

做了几年的开发，今天终于鼓起勇气开通了博客园。平时都是找各种大牛，看他们的分享博客的解决BUG。从今天起，我也开始分享我学习之路。还望大家多多支持！最近收到一个采用Axis2实现的WebService通过.net对接的需求，开始已为挺简单的一个事，常规引用调用后，测试不通过，需要验证密码。之后。。。开始疯狂的寻码之旅。方案一：https://www.cnblogs.com/yf2011/p/5465558.html 本方案让我试的好苦，WSE 2.0、WSE 3.0 都...

spark启动后出现“JAVA_HOME not set” 异常和"org.apache.hadoop.security.AccessControlException"异常

jps命令，主节点上有Master进程，其他子节点上有Work进行，登录Spark管理界面查看集群状态（主节点）：http://master01:8080/ 到此为止，Spark集群安装完毕. 1.注意：如果遇到 “JAVA_HOME not set” 异常，可以在sbin目录下的spark-config.sh 文件中加入如下配置： export JAVA_HOME=XXXX 2.如果遇到Hadoop HDFS的写入权限问题： org.apache.hadoop.security.AccessControlException 解决方案：在hdfs-site.xml中添加如下配置...

Hive JDBC:java.lang.RuntimeException: org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): User: root is not allowed to impersonate anonymous【代码】

java.sql.SQLException: Could not open client transport with JDBC Uri: jdbc:hive2://192.168.182.11:10000/default: Failed to open new session: java.lang.RuntimeException: org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): User: root is not allowed to impersonate anonymous at org.apache.hive.jdbc.HiveConnection.<init>(HiveConnection.java:224) at ...

java – Spring Security缓存我的身份验证【代码】

我刚刚在Spring Boot项目类路径中添加了Spring Security.我没有进行Java配置或XML配置. 问题是,当我向我的资源localhost：8080 / users发送请求时,我的第一个请求通常会通过基本身份验证进行身份验证,但后续请求不需要任何身份验证标头.即使我重新启动服务器,仍然会在不输入任何凭据的情况下对请求进行身份验证. 我想关掉这个“缓存”. 我试过很多客户.邮差,SOAP-UI,浏览器……已经读过this,但没有用解决方法:您必须将会话创建策略...

java – 在spring security中禁用特定URL的缓存【代码】

在我的情况下,我有四种方法来解决我的问题： >在我的index.html中编写元配置并禁用缓存(对我不起作用)>将index.html更改为index.jsp并禁用缓存,如here(为我工作,但我的客户端组需要index.html)>在web.xml中使用过滤器,区分所需的请求并禁用缓存>春季安全我的问题是如何使用Spring Security禁用index.html的缓存 (也许在http标签中使用intercept-url)解决方法:您可以使用Spring Security xml configuartion选择性地仅向index.html添...

java-具有Spring Security和Rabbitmq的OAuth2授权【代码】

当前,我们有许多与REST端点和RabbitMQ队列进行通信的Spring微服务.我们刚刚在所有服务上实现了OAuth2安全性,并且REST端点得到了适当的保护. 我们有一个编写的库,该库创建RabbitTemplate和AmqpAdmin Bean,因此不必在每个服务中都完成样板代码.我们正在使用特定用户(普通用户和管理员)连接到Spring中的RabbitMQ服务器.我们不想以个人用户身份连接到RabbitMQ服务器. 如果我们在Rabbit消息头中传递访问令牌,是否可以将RabbitTemplate配...

java-Spring Boot,Spring Security,会话范围的Bean,@ PreDestroy的会话超时问题【代码】

Fisrt,我需要说的是我正在使用会话范围的bean.因此,在关闭会话之前,将调用preDestroy()方法@Component @Scope(proxyMode = ScopedProxyMode.TARGET_CLASS, value = "session") public class MySessionBean {@PreDestroypublic void preDestroy() {//Do Smth with using Security principal} }当我使用Spring Security实用程序注销时,一切正常,将调用preDestroy()方法. 当我使用时主要的问题来了 application.properties中的server....

首页 / JAVA / 具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中

具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中

内容导读

内容图文

内容总结

内容备注

内容手机端

【具有Spring Security 4的CAS 4(java配置)-在票证被授予SSO后卡在重定向循环中】教程文章相关的互联网学习教程文章

解决 java.security.cert.CertificateException: java.lang.IllegalArgumentException: Invalid input to toASCII:

抛出java.security.InvalidKeyException: Illegal key size

Tomcat启动报java.security.InvalidKeyException:illegal Key Size

java程序中访问https时，报 PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target【代码】

java.security.InvalidKeyException: Illegal key size【图】

异常： java.security.InvalidKeyException: Illegal key size【代码】

spring security4.2.2的maven配置+spring-security配置详解+java源码+数据库设计【代码】

AES加密时抛出java.security.InvalidKeyException: Illegal key size or def

.Net调用Java端带有WS-Security支持的Web Service【亲测通过】【代码】

spark启动后出现“JAVA_HOME not set” 异常和"org.apache.hadoop.security.AccessControlException"异常

Hive JDBC:java.lang.RuntimeException: org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): User: root is not allowed to impersonate anonymous【代码】

java – Spring Security缓存我的身份验证【代码】

java – 在spring security中禁用特定URL的缓存【代码】

java-具有Spring Security和Rabbitmq的OAuth2授权【代码】

java-Spring Boot,Spring Security,会话范围的Bean,@ PreDestroy的会话超时问题【代码】

SPRING - 相关标签

JAVA - 相关标签

SSO - 相关标签

JAVA - 技术教程分类

JAVA - 最新教程

JAVA - 最热教程