A Research And Implementation Of Single-Sign-On System Based On JASIG-CAS

With the development of Internet technology, people need to use an increasing number of applications, and people tend to use more applications in studies and work, in this circumstance, people are urgently in need of technology like Single-Sign-On, Single-Sign-On can reduce the time of logging in to a system for users, as a result, it can improve the efficiency of work and study, Single-Sign-On can also help the administrators to easily manage every system. Therefore, a Single-Sign-On system based on CAS is implemented in this paper.First of all, the key technologies of this Single-Sign-On system is researched in this paper, it mainly includes: models of Single-Sign-On system, the architecture of the Single-Sign-On system, the protocol of CAS, certificate and HTTPS, JavaEE and SSM frames, cache and Redis,the technology of Access Control and Shiro, WebSocket and Netty,Restful API etc. Then, a Single-Sign-On system based on CAS is designed and implemented in this paper, and the system's architecture design, function design, database design and design for each module are explained in this paper, after the build of the Single-Sign-On system based on CAS, the cache layer based on Redis, two kinds of mechanism of Access Control, namely coarse-grained and find-grained , the function of register and management for users, and a WebSocket server for administrators to simplify their works are added to the system.At last, a functional test is implemented for the system in this paper.The back of website of the system is developed based on SpringMVC+Spring+MyBatis frames, the database of the system is MySQL, the cache of the system is Redis, the Access Control of coarse-grained mechanism is based on MyBatis and modified source codes of CAS protocol, the Access Control of fine-grained mechanism is based on Shiro, and the WebSocket server is based on Netty.