SSO单点登录系统原理分析及功能实现

Sso系统分析

什么是sso系统

SSO英文全称Single Sign On，单点登录。SSO是在多个应用系统中，用户只需要登录一次就可以访问所有相互信任的应用系统。它包括可以将这次主要的登录映射到其他应用中用于同一个用户的登录的机制。它是目前比较流行的企业业务整合的解决方案之一。
 
 

为什么要有单点登录系统

传统的登录实现方式

 
此方式在只有一个web工程时是没有问题。
 

集群环境下

 
 
 
 





 
 
 
 



 
 
 
 
 





 
 
 



 
 
 





 
 





 
 
集群环境下会出现要求用户多次登录的情况。
解决方案：
配置tomcat集群。配置tomcat Session复制。节点数不要超过5个。
可以使用Session服务器，保存Session信息，使每个节点是无状态。需要模拟Session。 
单点登录系统是使用redis模拟Session，实现Session的统一管理。
 
 
 

Sso系统的实现

 
需要创建一个sso服务工程，可以参考taotao-manager创建。

工程搭建

Taotao-sso（pom聚合工程）
|--taotao-sso-interface（jar）
|--taotao-sso-Service（war）
 
可以参考taotao-manager创建
 

Taotao-sso

Pom文件

<projectxmlns="http://maven.apache.org/POM/4.0.0"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">     <modelVersion>4.0.0</modelVersion>     <parent>         <groupId>com.taotao</groupId>         <artifactId>taotao-parent</artifactId>         <version>0.0.1-SNAPSHOT</version>     </parent>     <groupId>com.taotao</groupId>     <artifactId>taotao-sso</artifactId>     <version>0.0.1-SNAPSHOT</version>     <packaging>pom</packaging>     <dependencies>         <dependency>             <groupId>com.taotao</groupId>             <artifactId>taotao-comm 1c141 on</artifactId>             <version>0.0.1-SNAPSHOT</version>         </dependency>     </dependencies>     <!-- 配置tomcat插件 -->     <build>         <plugins>             <plugin>                 <groupId>org.apache.tomcat.maven</groupId>                 <artifactId>tomcat7-maven-plugin</artifactId>                 <configuration>                     <port>8087</port>                     <path>/</path>                 </configuration>             </plugin>         </plugins>     </build> </project>

taotao-sso-interface

taotao-sso-service

Pom文件

<projectxmlns="http://maven.apache.org/POM/4.0.0"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">     <modelVersion>4.0.0</modelVersion>     <parent>         <groupId>com.taotao</groupId>         <artifactId>taotao-sso</artifactId>         <version>0.0.1-SNAPSHOT</version>     </parent>     <artifactId>taotao-sso-service</artifactId>     <packaging>war</packaging>     <dependencies>         <dependency>             <groupId>com.taotao</groupId>             <artifactId>taotao-manager-dao</artifactId>             <version>0.0.1-SNAPSHOT</version>         </dependency>         <dependency>             <groupId>com.taotao</groupId>             <artifactId>taotao-sso-interface</artifactId>             <version>0.0.1-SNAPSHOT</version>         </dependency>         <!-- spring的依赖 -->         <!-- Spring -->         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-context</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-beans</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-webmvc</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-jdbc</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-aspects</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-jms</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-context-support</artifactId>         </dependency>         <!-- dubbo相关 -->         <dependency>             <groupId>com.alibaba</groupId>             <artifactId>dubbo</artifactId>             <!-- 排除依赖 -->             <exclusions>                 <exclusion>                     <groupId>org.springframework</groupId>                     <artifactId>spring</artifactId>                 </exclusion>                 <exclusion>                     <groupId>org.jboss.netty</groupId>                     <artifactId>netty</artifactId>                 </exclusion>             </exclusions>         </dependency>         <dependency>             <groupId>org.apache.zookeeper</groupId>             <artifactId>zookeeper</artifactId>         </dependency>         <dependency>             <groupId>com.github.sgroschupf</groupId>             <artifactId>zkclient</artifactId>         </dependency>         <!-- Redis客户端 -->         <dependency>             <groupId>redis.clients</groupId>             <artifactId>jedis</artifactId>         </dependency>     </dependencies> </project>

 

框架整合

 

表现层工程

表现层工程包含登录和注册页面，需要调用sso服务实现。
给app提供服务，restful形式的服务。
Taotao-sso-web（war包）
可以参考taotao-manager-web创建。

<projectxmlns="http://maven.apache.org/POM/4.0.0"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">     <modelVersion>4.0.0</modelVersion>     <parent>         <groupId>com.taotao</groupId>         <artifactId>taotao-parent</artifactId>         <version>0.0.1-SNAPSHOT</version>     </parent>     <groupId>com.taotao</groupId>     <artifactId>taotao-sso-web</artifactId>     <version>0.0.1-SNAPSHOT</version>     <packaging>war</packaging>     <dependencies>         <dependency>             <groupId>com.taotao</groupId>             <artifactId>taotao-sso-interface</artifactId>             <version>0.0.1-SNAPSHOT</version>         </dependency>         <!-- Spring -->         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-context</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-beans</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-webmvc</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-jdbc</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-aspects</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-jms</artifactId>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-context-support</artifactId>         </dependency>         <!-- JSP相关 -->         <dependency>             <groupId>jstl</groupId>             <artifactId>jstl</artifactId>         </dependency>         <dependency>             <groupId>javax.servlet</groupId>             <artifactId>servlet-api</artifactId>             <scope>provided</scope>         </dependency>         <dependency>             <groupId>javax.servlet</groupId>             <artifactId>jsp-api</artifactId>             <scope>provided</scope>         </dependency>         <!-- dubbo相关 -->         <dependency>             <groupId>com.alibaba</groupId>             <artifactId>dubbo</artifactId>             <!-- 排除依赖 -->             <exclusions>                 <exclusion>                     <groupId>org.springframework</groupId>                     <artifactId>spring</artifactId>                 </exclusion>                 <exclusion>                     <groupId>org.jboss.netty</groupId>                     <artifactId>netty</artifactId>                 </exclusion>             </exclusions>         </dependency>         <dependency>             <groupId>org.apache.zookeeper</groupId>             <artifactId>zookeeper</artifactId>         </dependency>         <dependency>             <groupId>com.github.sgroschupf</groupId>             <artifactId>zkclient</artifactId>         </dependency>         <dependency>             <groupId>junit</groupId>             <artifactId>junit</artifactId>         </dependency>     </dependencies>     <!-- 配置tomcat插件 -->     <build>         <plugins>             <plugin>                 <groupId>org.apache.tomcat.maven</groupId>                 <artifactId>tomcat7-maven-plugin</artifactId>                 <configuration>                     <port>8088</port>                     <path>/</path>                 </configuration>             </plugin>         </plugins>     </build> </project>