cas-server集群部署無法實現單點登錄問題

當cas-server部署到生產環境時，是三台服務器用nginx的負載均衡的集群模式，會出現其中一個項目登錄成功后，訪問另一個項目有時候還需要登錄，是因為cas-server的tgt是存在tomcat的內存中，兩個項目可能會訪問到不同的服務器，所以要實現共享ticket。這里使用的是redis

修改/WEB-INF/spring-configuration/ticketRegistry.xml

<bean id="ticketRegistry" class="com.sys.action.RedisTicketRegistry" />

cas-server提供了一個集群的抽象類，AbstractDistributedTicketRegistry，我們需要實現里面的方法。

import java.io.ByteArrayInputStream;
import java.io.ByteArrayOutputStream;
import java.io.ObjectInputStream;
import java.io.ObjectOutputStream;
import java.util.Collection;

import org.apache.log4j.Logger;
import org.jasig.cas.ticket.ServiceTicketImpl;
import org.jasig.cas.ticket.Ticket;
import org.jasig.cas.ticket.TicketGrantingTicket;
import org.jasig.cas.ticket.TicketGrantingTicketImpl;
import org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry;


import com.genilex.utils.PropertiesUtil;
import com.genilex.utils.RedisCache;

public class RedisTicketRegistry extends AbstractDistributedTicketRegistry {
    private static final Logger log = Logger.getLogger(RedisTicketRegistry.class);
    
    //ST最大空閑時間 
    private static int st_time = PropertiesUtil.getPropertyInt("st_time");  
    //TGT最大空閑時間 
    private static int tgt_time = PropertiesUtil.getPropertyInt("tgt_time");
    
    @Override
    protected boolean needsCallback() {
        return false;
    }

    @Override
    protected void updateTicket(final Ticket ticket) {
        System.out.println("updateTicket---tikcet:"+ticket);
        addTicket(ticket); 
    }

    @Override
    public void addTicket(final Ticket ticket) {
        System.out.println("addTicket---ticket:"+ticket);
        int seconds = 0; 
        String key = ticket.getId() ; 
        
        if(ticket instanceof TicketGrantingTicket){ 
            seconds = tgt_time; 
        }else{ 
            seconds = st_time; 
        } 
        
        ByteArrayOutputStream bos = new ByteArrayOutputStream(); 
        ObjectOutputStream oos = null; 
        try{ 
            oos = new ObjectOutputStream(bos); 
            oos.writeObject(ticket); 
              
        }catch(Exception e){ 
            log.error("adding ticket to redis error."); 
        }finally{ 
            try{  
                if(null!=oos) 
                    oos.close(); 
            }catch(Exception e){ 
                log.error("oos closing error when adding ticket to redis."); 
            } 
        } 
        
        RedisCache.set(key.getBytes(), bos.toByteArray(), seconds);
    }

    @Override
    public boolean deleteTicket(final String ticketId) {
        System.out.println("deleteTicket---ticketId:"+ticketId);
        if (ticketId == null) {
            return false;
        }
        RedisCache.del(ticketId.getBytes());
        return true;
    }

    @Override
    public Ticket getTicket(final String ticketId) {
        System.out.println("getTicket---ticketId:"+ticketId);
        if(null == ticketId) {
            return null; 
        }
        byte[] ticketByte = RedisCache.get(ticketId.getBytes());
        if(ticketByte == null) {
            return null;
        }
        
        Ticket ticket = null; 
        ByteArrayInputStream bais = new ByteArrayInputStream(ticketByte); 
        ObjectInputStream ois = null; 
               
        try{ 
            ois = new ObjectInputStream(bais); 
            ticket = (Ticket)ois.readObject();  
        }catch(Exception e){ 
            log.error("getting ticket to redis error."); 
        }finally{ 
            try{ 
                if(null!=ois)  ois.close(); 
            }catch(Exception e){ 
                log.error("ois closing error when getting ticket to redis."); 
            } 
        } 
        return getProxiedTicketInstance(ticket); 
    }
    
    /**
     * 取得當前用戶名
     * @param ticket
     * @return
     */
    private String getUsername(Ticket ticket){
         TicketGrantingTicket t = null;  
         try {  
             t = (TicketGrantingTicketImpl)ticket;  
         }catch (Exception e){  
             t = ((ServiceTicketImpl)ticket).getGrantingTicket();  
         }  
         return t.getAuthentication().getPrincipal().getId();
    }

    @Override
    public Collection<Ticket> getTickets() {
        throw new UnsupportedOperationException("GetTickets not supported."); 
    }