import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
/**
 * Create a new SAML response object.
 * @param id the id
 * @param issueInstant the issue instant
 * @param recipient the recipient
 * @param service the service
 * @return the response
 */
public Response newResponse(final String id, final DateTime issueInstant,
                            final String recipient, final WebApplicationService service) {

    final Response samlResponse = newSamlObject(Response.class);
    samlResponse.setID(id);
    samlResponse.setIssueInstant(issueInstant);
    samlResponse.setVersion(SAMLVersion.VERSION_20);
    if (service instanceof SamlService) {
        final SamlService samlService = (SamlService) service;

        final String requestId = samlService.getRequestID();
        if (StringUtils.isNotBlank(requestId)) {
            samlResponse.setInResponseTo(requestId);
        }
    }
    return samlResponse;
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
/**
 * Create a new SAML response object.
 * @param id the id
 * @param issueInstant the issue instant
 * @param recipient the recipient
 * @param service the service
 * @return the response
 */
public Response newResponse(final String id, final DateTime issueInstant,
                                     final String recipient, final WebApplicationService service) {

    final Response samlResponse = newSamlObject(Response.class);
    samlResponse.setID(id);
    samlResponse.setIssueInstant(issueInstant);
    samlResponse.setVersion(SAMLVersion.VERSION_11);
    samlResponse.setInResponseTo(recipient);
    if (service instanceof SamlService) {
        final SamlService samlService = (SamlService) service;

        final String requestId = samlService.getRequestID();
        if (StringUtils.isNotBlank(requestId)) {
            samlResponse.setInResponseTo(requestId);
        }
    }
    return samlResponse;
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Test
public void verifySsoSessionCookieOnServiceSsoDisallowed() throws Exception {
    final MockHttpServletResponse response = new MockHttpServletResponse();
    final MockHttpServletRequest request = new MockHttpServletRequest();

    final WebApplicationService svc = mock(WebApplicationService.class);
    when(svc.getId()).thenReturn("TestSsoFalse");

    final TicketGrantingTicket tgt = mock(TicketGrantingTicket.class);
    when(tgt.getId()).thenReturn("test");
    request.setCookies(new Cookie("TGT", "test5"));
    WebUtils.putTicketGrantingTicketInScopes(this.context, tgt);
    this.context.setExternalContext(new ServletExternalContext(new MockServletContext(), request, response));
    this.context.getFlowScope().put("service", svc);
    this.action.setCreateSsoSessionCookieOnRenewAuthentications(false);
    assertEquals("success", this.action.execute(this.context).getId());
    assertEquals(0, response.getCookies().length);
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Test
public void verifyGetServiceWithTheme() throws Exception {
    final MockRequestContext requestContext = new MockRequestContext();
    RequestContextHolder.setRequestContext(requestContext);

    final WebApplicationService webApplicationService = new WebApplicationServiceFactory().createService("myServiceId");
    requestContext.getFlowScope().put("service", webApplicationService);

    final ResourceLoader loader = mock(ResourceLoader.class);
    final Resource resource = mock(Resource.class);
    when(resource.exists()).thenReturn(true);
    when(loader.getResource(anyString())).thenReturn(resource);

    this.registeredServiceThemeBasedViewResolver.setResourceLoader(loader);

    assertEquals("/WEB-INF/view/jsp/myTheme/ui/casLoginView",
            this.registeredServiceThemeBasedViewResolver.buildView("casLoginView").getUrl());
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Override
protected void renderMergedOutputModel(
        final Map<String, Object> model, final HttpServletRequest request, final HttpServletResponse response) throws Exception {

    response.setCharacterEncoding(this.encoding);

    final WebApplicationService service = this.samlArgumentExtractor.extractService(request);
    final String serviceId = service != null ? service.getId() : "UNKNOWN";

    try {
        final Response samlResponse = this.samlObjectBuilder.newResponse(
                this.samlObjectBuilder.generateSecureRandomId(),
                DateTime.now().minusSeconds(this.skewAllowance), serviceId, service);

        prepareResponse(samlResponse, model);

        this.samlObjectBuilder.encodeSamlResponse(response, request, samlResponse);
    } catch (final Exception e) {
        logger.error("Error generating SAML response for service {}.", serviceId);
        throw e;
    }
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
/**
 * Prepare the data for the login page.
 *
 * @param context The current webflow context
 */
protected void prepareForLoginPage(final RequestContext context) {
    final HttpServletRequest request = WebUtils.getHttpServletRequest(context);
    final HttpServletResponse response = WebUtils.getHttpServletResponse(context);
    final HttpSession session = request.getSession();

    // web context
    final WebContext webContext = new J2EContext(request, response);

    // save parameters in web session
    final WebApplicationService service = WebUtils.getService(context);
    logger.debug("save service: {}", service);
    session.setAttribute(SERVICE, service);
    saveRequestParameter(request, session, THEME);
    saveRequestParameter(request, session, LOCALE);
    saveRequestParameter(request, session, METHOD);

    // for all clients, generate redirection urls
    for (final Client client : this.clients.findAllClients()) {
        final String key = client.getName() + "Url";
        final BaseClient baseClient = (BaseClient) client;
        final String redirectionUrl = baseClient.getRedirectionUrl(webContext);
        logger.debug("{} -> {}", key, redirectionUrl);
        context.getFlowScope().put(key, redirectionUrl);
    }
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
/**
 * Generate the success view. The result will contain the assertion and the proxy iou.
 *
 * @param assertion the assertion
 * @param proxyIou the proxy iou
 * @param service the validated service
 * @param proxyGrantingTicket the proxy granting ticket
 * @return the model and view, pointed to the view name set by
 */
private ModelAndView generateSuccessView(final Assertion assertion, final String proxyIou,
                                         final WebApplicationService service,
                                         final TicketGrantingTicket proxyGrantingTicket) {

    final ModelAndView modelAndView = getModelAndView(true, service);

    modelAndView.addObject(CasViewConstants.MODEL_ATTRIBUTE_NAME_ASSERTION, assertion);
    modelAndView.addObject(CasViewConstants.MODEL_ATTRIBUTE_NAME_SERVICE, service);
    modelAndView.addObject(CasViewConstants.MODEL_ATTRIBUTE_NAME_PROXY_GRANTING_TICKET_IOU, proxyIou);
    if (proxyGrantingTicket != null) {
        modelAndView.addObject(CasViewConstants.MODEL_ATTRIBUTE_NAME_PROXY_GRANTING_TICKET, proxyGrantingTicket.getId());
    }
    final Map<String, ?> augmentedModelObjects = augmentSuccessViewModelObjects(assertion);
    if (augmentedModelObjects != null) {
        modelAndView.addAllObjects(augmentedModelObjects);
    }
    return modelAndView;
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Test
public void verifyTargetMatchesingSamlService() {
    final MockHttpServletRequest request = new MockHttpServletRequest();
    request.setParameter(SamlProtocolConstants.CONST_PARAM_TARGET, "https://some.service.edu/path/to/app");

    final WebApplicationService service = new DefaultArgumentExtractor(new SamlServiceFactory()).extractService(request);
    final Service impl = new DefaultArgumentExtractor(new SamlServiceFactory()).extractService(request);
    assertTrue(impl.matches(service));
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Test
public void verifyTargetMatchesNoSamlService() {
    final MockHttpServletRequest request = new MockHttpServletRequest();
    request.setParameter("TARGET", "https://some.service.edu/path/to/app");
    final Service impl = new DefaultArgumentExtractor(new SamlServiceFactory()).extractService(request);

    final MockHttpServletRequest request2 = new MockHttpServletRequest();
    request2.setParameter(SamlProtocolConstants.CONST_PARAM_TARGET, "https://some.SERVICE.edu");

    final WebApplicationService service = new DefaultArgumentExtractor(new SamlServiceFactory()).extractService(request2);

    assertFalse(impl.matches(service));
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
/**
 * Prepare the data for the login page.
 *
 * @param context The current webflow context
 */
protected void prepareForLoginPage(final RequestContext context) {
    final HttpServletRequest request = WebUtils.getHttpServletRequest(context);
    final HttpServletResponse response = WebUtils.getHttpServletResponse(context);
    final HttpSession session = request.getSession();

    // web context
    final WebContext webContext = new J2EContext(request, response);

    // save parameters in web session
    final WebApplicationService service = WebUtils.getService(context);
    logger.debug("save service: {}", service);
    session.setAttribute(CasProtocolConstants.PARAMETER_SERVICE, service);
    saveRequestParameter(request, session, ThemeChangeInterceptor.DEFAULT_PARAM_NAME);
    saveRequestParameter(request, session, LocaleChangeInterceptor.DEFAULT_PARAM_NAME);
    saveRequestParameter(request, session, CasProtocolConstants.PARAMETER_METHOD);

    final LinkedHashMap<String, String> urls = new LinkedHashMap<>();
    // for all clients, generate redirection urls
    for (final Client client : this.clients.findAllClients()) {
        final IndirectClient indirectClient = (IndirectClient) client;
        // clean Client suffix for default names
        final String name = client.getName().replace("Client", "");
        final String redirectionUrl = indirectClient.getRedirectionUrl(webContext);
        logger.debug("{} -> {}", name, redirectionUrl);
        urls.put(name, redirectionUrl);
    }
    context.getFlowScope().put(PAC4J_URLS, urls);
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Override
public Response build(final WebApplicationService webApplicationService, final String ticketId) {
    final GoogleAccountsService service = (GoogleAccountsService) webApplicationService;

    final Map<String, String> parameters = new HashMap<>();
    final String samlResponse = constructSamlResponse(service);
    final String signedResponse = samlObjectBuilder.signSamlResponse(samlResponse,
        this.privateKey, this.publicKey);
    parameters.put(SamlProtocolConstants.PARAMETER_SAML_RESPONSE, signedResponse);
    parameters.put(SamlProtocolConstants.PARAMETER_SAML_RELAY_STATE, service.getRelayState());

    return buildPost(service, parameters);
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Test
public void verifyServiceCreationSuccessfullyById() {

    final MockHttpServletRequest request = new MockHttpServletRequest();
    request.addParameter(OpenIdProtocolConstants.OPENID_RETURNTO, "test");
    request.addParameter(OpenIdProtocolConstants.OPENID_IDENTITY, "identity");
    final OpenIdServiceFactory factory = new OpenIdServiceFactory();
    final WebApplicationService service = factory.createService(request);
    assertNotNull(service);
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Test
public void verifyServiceCreationMissingReturn() {

    final MockHttpServletRequest request = new MockHttpServletRequest();
    request.addParameter(OpenIdProtocolConstants.OPENID_IDENTITY, "identity");
    final OpenIdServiceFactory factory = new OpenIdServiceFactory();
    final WebApplicationService service = factory.createService(request);
    assertNull(service);
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
/**
 * Overrideable method to determine which credentials to use to grant a
 * proxy granting ticket. Default is to use the pgtUrl.
 *
 * @param service the webapp service requesting proxy
 * @param request the HttpServletRequest object.
 * @return the credentials or null if there was an error or no credentials
 * provided.
 */
protected Credential getServiceCredentialsFromRequest(final WebApplicationService service, final HttpServletRequest request) {
    final String pgtUrl = request.getParameter(CasProtocolConstants.PARAMETER_PROXY_CALLBACK_URL);
    if (StringUtils.hasText(pgtUrl)) {
        try {
            final RegisteredService registeredService = this.servicesManager.findServiceBy(service);
            verifyRegisteredServiceProperties(registeredService, service);
            return new HttpBasedServiceCredential(new URL(pgtUrl), registeredService);
        } catch (final Exception e) {
            logger.error("Error constructing pgtUrl", e);
        }
    }

    return null;
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
/**
 * Generate error view, set to {@link #setFailureView(String)}.
 *
 * @param code the code
 * @param description the description
 * @param args the args
 * @param request the request
 * @return the model and view
 */
private ModelAndView generateErrorView(final String code, final String description,
                                       final Object[] args,
                                       final HttpServletRequest request,
                                       final WebApplicationService service) {

    final ModelAndView modelAndView = getModelAndView(false, service);
    final String convertedDescription = this.context.getMessage(description, args,
        description, request.getLocale());
    modelAndView.addObject(CasViewConstants.MODEL_ATTRIBUTE_NAME_ERROR_CODE, code);
    modelAndView.addObject(CasViewConstants.MODEL_ATTRIBUTE_NAME_ERROR_DESCRIPTION, convertedDescription);

    return modelAndView;
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
private ModelAndView getModelAndView(final boolean isSuccess, final WebApplicationService service) {
    if (service != null){
        if (service.getFormat() == ValidationResponseType.JSON) {
            return new ModelAndView(DEFAULT_SERVICE_VIEW_NAME_JSON);
        }
    }
    return new ModelAndView(isSuccess ? this.successView : this.failureView);
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Test
public void verifyGetServiceWithDefault() throws Exception {
    final MockRequestContext requestContext = new MockRequestContext();
    RequestContextHolder.setRequestContext(requestContext);

    final WebApplicationService webApplicationService = new WebApplicationServiceFactory().createService("myDefaultId");
    requestContext.getFlowScope().put("service", webApplicationService);

    assertEquals("/WEB-INF/view/jsp/default/ui/casLoginView",
            this.registeredServiceThemeBasedViewResolver.buildView("casLoginView").getUrl());
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Override
public final WebApplicationService extractService(final HttpServletRequest request) {
    final WebApplicationService service = extractServiceInternal(request);

    if (service == null) {
        logger.debug("Extractor did not generate service.");
    } else {
        logger.debug("Extractor generated service for: {}", service.getId());
    }

    return service;
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Override
public WebApplicationService extractServiceInternal(final HttpServletRequest request) {
    for (final ServiceFactory<? extends WebApplicationService> factory : getServiceFactories()) {
        final WebApplicationService service = factory.createService(request);
        if (service != null) {
            logger.debug("Created {} based on {}", service, factory);
            return service;
        }
    }
    logger.debug("No service could be extracted based on the given request");
    return null;
}
 

import org.jasig.cas.authentication.principal.WebApplicationService; //导入依赖的package包/类
@Test
public void verifyTargetMatchesingSamlService() {
    final MockHttpServletRequest request = new MockHttpServletRequest();
    request.setParameter("TARGET", "https://some.service.edu/path/to/app");

    final SamlArgumentExtractor ext = new SamlArgumentExtractor();
    final WebApplicationService service = ext.extractService(request);

    final SamlService impl = SamlService.createServiceFrom(request);
    assertTrue(impl.matches(service));
}