import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
public final String validatorCaptcha(final RequestContext context, final Credentials credentials, final MessageContext messageContext) throws Exception {
	final HttpServletRequest request = WebUtils.getHttpServletRequest(context);  
    HttpSession session = request.getSession();  
    String authcode = (String)session.getAttribute(com.google.code.kaptcha.Constants.KAPTCHA_SESSION_KEY);  
    session.removeAttribute(com.google.code.kaptcha.Constants.KAPTCHA_SESSION_KEY);  
    UsernamePasswordCaptchaCredentials upc = (UsernamePasswordCaptchaCredentials)credentials;  
    String submitAuthcode =upc.getCaptcha();  
    if(!StringUtils.hasText(submitAuthcode) || !StringUtils.hasText(authcode)){  
        populateErrorsInstance(new NullAuthCaptchaAuthenticationException(CAPTCHA_REQUIRED_MSG),messageContext);  
        return "error";    
    }  
    if(submitAuthcode.equals(authcode)){    
        return "success";  
    }  
    populateErrorsInstance(new BadAuthCaptchaAuthenticationException(CAPTCHA_ERROR_MSG),messageContext);  
    return "error";
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
@Override
public Credentials convert(final Credential credential) {
    if (!(credential instanceof UsernamePasswordCredential)) {
        throw new IllegalArgumentException(credential + " not supported.");
    }
    final UsernamePasswordCredential original = (UsernamePasswordCredential) credential;
    final UsernamePasswordCredentials old = new UsernamePasswordCredentials();
    old.setUsername(original.getUsername());
    old.setPassword(original.getPassword());
    return old;
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
/**
 * Return true if Credentials are UsernamePasswordCredentials, false
 * otherwise.
 */
@Override
public boolean supports(final Credentials credentials) {
    return credentials != null
            && UsernamePasswordCredentials.class.isAssignableFrom(credentials
                    .getClass());
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
/**
 * Authenticate the user credentials and retrieve samlAssertion for authentication Service
 * Obtain the GlobusCredential for the Authenticated User from Dorian
 * Validate the Proxy or GlobusCredential
 * Delegate the Globus Credentials
 * Adding the serialized Delegated Credentials Reference and Grid Identity to the attributes map
 * Create the Principal from the grid identity
 * Create a new Authentication Object using the Principal
 */
@SuppressWarnings("unchecked")
public Authentication authenticate(Credentials credentials)
		throws AuthenticationException {
	if (null == webSSOProperties) {
		throw new AuthenticationConfigurationException(
				"Error Initializing Authentication Manager properties");
	}
	UsernamePasswordAuthenticationServiceURLCredentials userNameCredentials=(UsernamePasswordAuthenticationServiceURLCredentials)credentials;
	SAMLAssertion samlAssertion = authenticationServiceHelper.authenticate(
			userNameCredentials.getAuthenticationServiceURL(),userNameCredentials.getCredential());

	DorianInformation dorianInformation = this.getDorianInformation(userNameCredentials.getDorianName());
	GlobusCredential globusCredential = dorianHelper.obtainProxy(samlAssertion, dorianInformation);
	proxyValidator.validate(globusCredential);
	String serializedDelegatedCredentialReference = gridCredentialDelegator
													.delegateGridCredential(globusCredential, this.getHostIdentities());

	Map<String, Object> attributesMap = (Map<String, Object>)samlToAttributeMapper.convertSAMLtoHashMap(samlAssertion);
	attributesMap.put(WebSSOConstants.CAGRID_SSO_DELEGATION_SERVICE_EPR, serializedDelegatedCredentialReference);
	attributesMap.put(WebSSOConstants.CAGRID_SSO_GRID_IDENTITY, globusCredential.getIdentity());
	
	String principal = this.constructPrincipal(attributesMap);
	
	Principal p = new SimplePrincipal(principal,attributesMap);
	MutableAuthentication mutableAuthentication = new MutableAuthentication(p);
	return mutableAuthentication;
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
@Override
public boolean authenticate(final Credentials credential) throws AuthenticationException {
    return true;
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
@Override
public boolean supports(final Credentials credential) {
    return true;
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
@Override
public boolean authenticate(final Credentials credential) throws AuthenticationException {
    return false;
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
@Override
protected String extractPrincipalId(final Credentials credentials) {
    final UsernamePasswordCredentials usernamePasswordCredentials = (UsernamePasswordCredentials) credentials;
    return principalNameTransformer.transform(usernamePasswordCredentials.getUsername());
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
protected Credentials constructCredentialsFromRequest(
    final RequestContext context) {
    final HttpServletRequest request = WebUtils
        .getHttpServletRequest(context);
    final String remoteUser = request.getRemoteUser();

    if (StringUtils.hasText(remoteUser)) {
        if (logger.isDebugEnabled()) {
            logger.debug("Remote  User [" + remoteUser
                + "] found in HttpServletRequest");
        }

        /**
         * Grab the Shibboleth attributes from the HTTP headers, create a
         * map of them, and include the, in the SimplePrincipal.
         */
        HashMap<String, Object> attributes = new HashMap<String, Object>();

        Enumeration en = request.getHeaderNames();
        while (en.hasMoreElements()) {
            String name = (String) en.nextElement();
            if (name.startsWith("shibattr-") || name.startsWith("Shib-")) {
                ArrayList<String> valueList = new ArrayList<String>();
                Enumeration en2 = request.getHeaders(name);
                while (en2.hasMoreElements()) {
                    String value = (String) en2.nextElement();
                    if (value.length() > 0) {
                        valueList.add(value);
                    }
                }
                if (valueList.size() > 0) {
                    if (name.startsWith("shibattr-"))
                        attributes.put(
                            name.substring("shibattr-".length()),
                            (valueList.size() == 1 ? valueList.get(0)
                                : valueList));
                    else
                        attributes.put(name,
                            (valueList.size() == 1 ? valueList.get(0)
                                : valueList));
                }
            }
        }

        return new PrincipalBearingCredentials(new SimplePrincipal(
            remoteUser, attributes));
    }

    if (logger.isDebugEnabled()) {
        logger.debug("Remote User not found in HttpServletRequest.");
    }

    return null;
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
protected String extractPrincipalId(Credentials credentials) {
    return ((PrincipalBearingCredentials) credentials).getPrincipal()
        .getId();
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
public boolean supports(final Credentials credentials) {
    return credentials != null
        && credentials.getClass().equals(PrincipalBearingCredentials.class);
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
public Principal resolvePrincipal(final Credentials credentials) {
    return (credentials != null ? ((PrincipalBearingCredentials) credentials)
        .getPrincipal()
        : null);
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
public Authentication authenticate(Credentials credentials) throws AuthenticationException
{
	if (null == webSSOProperties)
	{
		throw new AuthenticationConfigurationException ("Error Initializing Authentication Manager properties");
	}
	
	// Obtain the implementation for the AuthenticationServiceHelper Interface
	AuthenticationServiceHelper authenticationServiceHelper = (AuthenticationServiceHelper)ObjectFactory.getObject(WebSSOConstants.AUTHENTICATION_SERVICE_HELPER);
	
	// Authenticate the user credentials and retrieve 
	SAMLAssertion samlAssertion = authenticationServiceHelper.authenticate(getAuthenticationServiceURL(), ((UsernamePasswordCredentials) credentials).getUsername(), ((UsernamePasswordCredentials) credentials).getPassword());

	// Obtain the implementation for the DorianHelper Interface
	DorianHelper dorianHelper = (DorianHelper) ObjectFactory.getObject(WebSSOConstants.DORIAN_HELPER);
	
	// Obtained the GlobusCredential for the Authenticated User
	GlobusCredential globusCredential = dorianHelper.obtainProxy(samlAssertion);
	this.credentials = globusCredential;
	
	// Obtain the implementation for the GridCredentialsDelegator Interface
	GridCredentialDelegator gridCredentialDelegator = (GridCredentialDelegator)ObjectFactory.getObject(WebSSOConstants.GRID_CREDENTIAL_DELEGATOR);
	
	// Delegate the Globus Credentials
	String serializedDelegatedCredentialReference = gridCredentialDelegator.delegateGridCredential(globusCredential, dorianHelper.getProxyLifetime(), this.getHostIdentities());
       this.serializedDelegationEpr = serializedDelegatedCredentialReference;		 
	// Obtain the implementation for the SAMLToAttributeMapper Interface
	SAMLToAttributeMapper samlToAttributeMapper = (SAMLToAttributeMapper)ObjectFactory.getObject(WebSSOConstants.SAML_TO_ATTRIBUTE_MAPPER);  

	HashMap<String, String> attributesMap = samlToAttributeMapper.convertSAMLtoHashMap(samlAssertion);

	// Adding the serialed Delegated Credentails Reference and Grid Identity to the 
	attributesMap.put(WebSSOConstants.CAGRID_SSO_DELEGATION_SERVICE_EPR, serializedDelegatedCredentialReference);
	attributesMap.put(WebSSOConstants.CAGRID_SSO_GRID_IDENTITY, globusCredential.getIdentity());
	
	// Creating the Principal from the grid identity
	Principal p = new SimplePrincipal(this.constructPrincipal(attributesMap));

	// Create a new Authentication Object using the Principal
	MutableAuthentication mutableAuthentication = new MutableAuthentication(p);
	
	return mutableAuthentication;
		
}
 

import org.jasig.cas.authentication.principal.Credentials; //导入依赖的package包/类
/**
 * Method to determine if the credential supplied are valid.
 *
 * @param credential The credential to validate.
 * @return true if valid, return false otherwise.
 * @throws AuthenticationException An AuthenticationException can contain
 * details about why a particular authentication request failed.
 */
boolean authenticate(Credentials credential)
    throws AuthenticationException;