spring boot 集成cas 服务端搭建

import org.springframework.context.annotation.Configuration;
import org.springframework.core.annotation.Order;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.config.annotation.web.servlet.configuration.EnableWebMvcSecurity;
 
@Configuration
@EnableWebMvcSecurity
public class CasSecurityConfig {
 
    @Configuration
    @Order(1)
    public static class ApiWebSecurityConfigurationAdapter extends WebSecurityConfigurerAdapter {
 
        protected void configure(HttpSecurity http) throws Exception {
            http
                .antMatcher("/api/**")
                .authorizeRequests()
                .anyRequest().authenticated()
                .and()
                .csrf().disable();
        }
 
        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
            auth
                .inMemoryAuthentication()
                .withUser("user").password("{noop}password").roles("USER");
        }
    }
 
    @Configuration
    public static class FormWebSecurityConfigurerAdapter extends WebSecurityConfigurerAdapter {
 
        @Override
        protected void configure(HttpSecurity http) throws Exception {
            http
                .authorizeRequests()
                .anyRequest().authenticated()
                .and()
                .formLogin().loginPage("/login").permitAll()
                .and()
                .csrf().disable();
        }
 
        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
            auth
                .inMemoryAuthentication()
                .withUser("user").password("{noop}password").roles("USER");
        }
    }
}

这个代码示例展示了如何在Spring Boot应用中使用@Configuration和@EnableWebMvcSecurity注解来配置Spring Security。它定义了两个WebSecurityConfigurerAdapter的内部类，一个用于API端点的安全配置，另一个用于表单登录的安全配置。同时，它展示了如何使用AuthenticationManagerBuilder来配置内存中的用户凭据。这个例子为开发者提供了一个清晰的起点，以便他们可以将CAS集成到自己的Spring Boot应用中。