Cas接入

1#CAS
2127.0.0.1   clienta.com
3127.0.0.1   clientb.com

 1server {
 2listen 80;
 3server_name clienta.com;
 4
 5location / {
 6proxy_set_header Host $host;
 7proxy_set_header X-Real-IP $remote_addr;
 8proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 9proxy_pass http://127.0.0.1:1024;
10}
11}
12
13server {
14listen 80;
15server_name clientb.com;
16
17location / {
18proxy_set_header Host $host;
19proxy_set_header X-Real-IP $remote_addr;
20proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
21proxy_pass http://127.0.0.1:1025;
22}
23}

1cd clienta
2npm start // or node app.js
3cd clientb
4npm start // or node app.js

  1// app.js
  2const express = require('express')
  3const app = express()
  4const session = require('express-session');
  5const cas = require('connect-cas');
  6const URL = require('url');
  7const querystring = require("querystring");
  8
  9const casServer = 'cas.ucloudadmin.com'
 10const casClient = 'clienta.com'
 11
 12// var _defaults = {
 13//     protocol: 'https',
 14//     host: undefined,
 15//     hostname: undefined, // ex. google
 16//     port: 443,
 17//     gateway: false, // set to true only if you wish to do authentication instead of authorization
 18//     paths: {
 19//         validate: '/cas/validate',               // not implemented
 20//         serviceValidate: '/cas/serviceValidate', // CAS 2.0
 21//         proxyValidate: '/cas/proxyValidate',     // not implemented
 22//         proxy: '/cas/proxy',                     // not implemented
 23//         login: '/cas/login',
 24//         logout: '/cas/logout'
 25//     }
 26// }
 27
 28/*
 29var myOptions = {
 30    protocol: 'https',
 31    host: 'cas.ucloudadmin.com',
 32    hostname: 'ucloud', // ex. google
 33    port: 443,
 34    gateway: false, // set to true only if you wish to do authentication instead of authorization
 35    paths: {
 36        validate: '/cas/validate',               // not implemented
 37        serviceValidate: '/cas/serviceValidate', // CAS 2.0
 38        proxyValidate: '/cas/proxyValidate',     // not implemented
 39        proxy: '/cas/proxy',                     // not implemented
 40        login: '/cas/login',
 41        logout: '/cas/logout'
 42    }
 43}
 44cas.configure(myOptions);
 45*/
 46
 47// Your CAS server's hostname
 48cas.configure({
 49    protocol: 'https',
 50    host: casServer,
 51});
 52console.log(cas.configure());
 53
 54app.use(express.json());
 55app.use(express.urlencoded({ extended: true }))
 56
 57app.use(
 58    session({
 59        secret: 'clienta',
 60        name: 'SESSIONID',
 61        resave: true,
 62        saveUninitialized: true,
 63        cookie: { maxAge: 24 * 60 * 60 * 1000, httpOnly: true }, //过期时间 24 小时
 64    }),
 65);
 66
 67// 用户验证
 68app.use(function (req, res, next) {
 69    console.log('req.url', req.url);
 70    let path = req.url.split('?')[0]
 71    // 跳过登录请求
 72    if (path === '/login') {
 73        next()
 74    } else {
 75        if (req.session.cas && req.session.cas.user) {
 76            next()
 77        } else {
 78            return res.send(`<h2>this is clientA</h2><p>You are not logged in. <a href=/login?service=http://${casClient}${req.url}>Log in now.</a><p>`);
 79            // 自动跳转登录
 80            // return res.redirect(`/login?service=http://${casClient}${req.url}`);
 81        }
 82    }
 83});
 84
 85app.get('/', function (req, res) {
 86    console.log('get /', req.url)
 87    return res.send('<h2>this is clienta</h2><p>You are logged in. Your username is ' + req.session.cas.user + '. <a href="/logout">Log Out</a></p>');
 88});
 89
 90app.get('/login', cas.serviceValidate(), cas.authenticate(), function (req, res) {
 91    console.log('/login', req.url)
 92    let arg = URL.parse(req.url).query;
 93    let params = querystring.parse(arg);
 94    // console.log("params-service " + params.service);
 95    // 重定向到初始请求地址
 96    return res.redirect(params.service || '/');
 97});
 98
 99app.get('/logout', function (req, res) {
100    if (!req.session) {
101        return res.redirect('/');
102    }
103    // Forget our own login session
104    if (req.session.destroy) {
105        req.session.destroy();
106    } else {
107        // Cookie-based sessions have no destroy()
108        req.session = null;
109    }
110    // Send the user to the official campus-wide logout URL
111    var options = cas.configure();
112    options.pathname = options.paths.logout;
113    return res.redirect(URL.format(options));
114});
115
116
117// 业务接口路由
118app.get('/api', function (req, res) {
119    return res.send('<h2>this is clientA API Page</h2><p>You are logged in. Your username is ' + req.session.cas.user);
120});
121app.get('/api/userInfo', function (req, res) {
122    res.json({ retCode: '1', data: req.session.cas });
123});
124
125// ......
126
127app.listen(1024, () => {
128    console.log('示例程序正在监听 1024 端口！')
129});