Cas 4.2.7 OAuth+Rest 实现SSO

try {
final Cookie cookie = org.springframework.web.util.WebUtils.getCookie(
request, getCookieName());
return cookie == null ? null : this.casCookieValueManager.obtainCookieValue(cookie, request);
} catch (final Exception e) {
logger.debug(e.getMessage(), e);
}
return null;

final String cookieValue = this.cipherExecutor.decode(cookie.getValue());
LOGGER.debug("Decoded cookie value is [{}]", cookieValue);
if (StringUtils.isBlank(cookieValue)) {
LOGGER.debug("Retrieved decoded cookie value is blank. Failed to decode cookie [{}]", cookie.getName());
return null;
} final String[] cookieParts = cookieValue.split(String.valueOf(COOKIE_FIELD_SEPARATOR));
if (cookieParts.length != COOKIE_FIELDS_LENGTH) {
throw new IllegalStateException("Invalid cookie. Required fields are missing");
}
final String value = cookieParts[0];
final String remoteAddr = cookieParts[1];
final String userAgent = cookieParts[2]; if (StringUtils.isBlank(value) || StringUtils.isBlank(remoteAddr)
|| StringUtils.isBlank(userAgent)) {
throw new IllegalStateException("Invalid cookie. Required fields are empty");
} if (!remoteAddr.equals(request.getRemoteAddr())) {
throw new IllegalStateException("Invalid cookie. Required remote address does not match "
+ request.getRemoteAddr());
} if (!userAgent.equals(request.getHeader("user-agent"))) {
throw new IllegalStateException("Invalid cookie. Required user-agent does not match "
+ request.getHeader("user-agent"));
}
return value;

WebUtils.putTicketGrantingTicketInScopes(context, this.ticketGrantingTicketCookieGenerator.retrieveCookieValue(request));

String cookie = this.ticketGrantingTicketCookieGenerator.retrieveCookieValue(request);
//增加从request中获取tgt
if (cookie == null && request.getRequestURI().contains("/login")) {
String tgt = request.getParameter("tgt");
if (StringUtils.isNotBlank(tgt)) {
HttpServletResponse response = WebUtils.getHttpServletResponse(context);
//TGT生成为TGC并添加客户端cookie中
this.ticketGrantingTicketCookieGenerator.addCookie(request, response, tgt);
//tgt直接付值给cookie
cookie = tgt;
}
}
WebUtils.putTicketGrantingTicketInScopes(context,cookie);

<on-start>
<evaluate expression="initialFlowSetupExAction"/>
</on-start>