SSO 登录成功后，CAS for Jira 7 重定向到 Jira 登录页面

Question

我想做的是使用 Apereo Java CAS Client 将 Jira 7.12.3 与 SSO 服务器集成。

我关注了this guide and got the two needed jars from here。

我已经按照那里的描述将 CAS 与 JIRA 集成在一起，但是当我打开 jira 时，用户会被重定向到 /secure/Dashboard.jspa（jira 登录页面）。点击右上角的登录，cas页面打开，但是登录成功后，用户被重定向回JIRA登录页面，用户仍然没有登录。谁能帮我解决这个问题？

这里是我添加的配置：

web.xml:

<!-- CAS FILTER -->
<filter>
  <filter-name>CasSingleSignOutFilter</filter-name>
  <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
  <init-param>
       <param-name>casServerUrlPrefix</param-name>
       <param-value>https://[sso url]</param-value>
   </init-param>
</filter>
<filter>
 <filter-name>CasAuthenticationFilter</filter-name>
<filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
 <init-param>
 <param-name>casServerLoginUrl</param-name>
 <param-value>https://[sso url]/login</param-value>
 </init-param>
 <init-param>
   <param-name>serverName</param-name>
   <param-value>http://localhost:8080/</param-value>
 </init-param>
</filter>
<filter>
   <filter-name>CasValidationFilter</filter-name>
   <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>
   <init-param>
       <param-name>casServerUrlPrefix</param-name>
       <param-value>https://[sso url]</param-value>
   </init-param>
   <init-param>
       <param-name>serverName</param-name>
       <param-value>http://localhost:8080/</param-value>
   </init-param>
   <init-param>
       <param-name>redirectAfterValidation</param-name>
       <param-value>true</param-value>
   </init-param>
</filter>
<!-- Just before the last filter in the defined chain -->

<!-- CAS - Java Client Filter Mappings --> 
<filter-mapping>
   <filter-name>CasSingleSignOutFilter</filter-name>
   <url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
    <filter-name>CasAuthenticationFilter</filter-name>
    <url-pattern>/default.jsp</url-pattern>
</filter-mapping>
<filter-mapping>
    <filter-name>CasValidationFilter</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

<!-- CAS:START - Java Client Single Sign Out Listener -->
<listener>
    <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
</listener>
<!-- CAS:END -->

六翼天使-config.xml:

<init-param>
   <param-name>login.url</param-name>
        <!--<param-value>/login.jsp?permissionViolation=true&amp;os_destination=${originalurl}&amp;page_caps=${pageCaps}&amp;user_role=${userRole}</param-value>-->
        <param-value>https://[sso url]/login?service=${originalurl}</param-value>
</init-param>
<init-param>
   <param-name>link.login.url</param-name>
        <param-value>https://[sso url]/login?service=${originalurl}</param-value>
 </init-param>
 <init-param>
    <param-name>logout.url</param-name>
    <!--<param-value>/secure/Logout!default.jspa</param-value>-->
    <param-value>https://[sso url]/logout</param-value>
 </init-param>

 <!-- Inserted this Authenticator instead of JiraSeraphAuthenticator -->
<authenticator class="org.jasig.cas.client.integration.atlassian.Jira7CasAuthenticator">
    <init-param>
        <param-name>casServerUrlPrefix</param-name>
        <param-value>https://[sso url]</param-value>
    </init-param>
    <init-param>
        <param-name>serverName</param-name>
        <param-value>http://localhost:8080</param-value>
    </init-param>
</authenticator>

Answer 1

问题是我将 jira-url 插入为 "localhost:8080"。因此，我的 cas 服务器无法通过 url 中的服务参数唯一标识服务。

认为这可能对遇到类似问题的其他人有所帮助。

SSO 登录成功后，CAS for Jira 7 重定向到 Jira 登录页面

CAS for Jira 7 redirects to Jira login page after successful SSO login

single-sign-on

jira

cas

jasig