1

13693261870

2022-09-16 58d012f11dd34564d81b4eb3a6099eb689876597

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
package org.apereo.cas.web.landtool.single.service;
 
import java.time.format.DateTimeFormatter;
import java.util.Collection;
import java.util.List;
import java.util.concurrent.ConcurrentHashMap;
import java.util.concurrent.CopyOnWriteArraySet;
 
import org.apache.commons.lang3.StringUtils;
import org.apereo.cas.CentralAuthenticationService;
import org.apereo.cas.authentication.Authentication;
import org.apereo.cas.authentication.principal.Principal;
import org.apereo.cas.ticket.Ticket;
import org.apereo.cas.ticket.TicketGrantingTicket;
import org.apereo.cas.web.landtool.single.config.SingleLoginProperties;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
 
/**
 * @author Tanbin
 * @date  2018-11-30
 */
public class SingleLoginService {
    private static final Logger LOGGER = LoggerFactory.getLogger(SingleLoginService.class);
    @Autowired
    public SingleLoginProperties singleLoginProperties;
    @Autowired
    private UserIdObtainService userIdObtainService;
 
    private CentralAuthenticationService centralAuthenticationService;
    
    
 
    
    public static CopyOnWriteArraySet<String> set =new CopyOnWriteArraySet<>();
    
    public SingleLoginService(CentralAuthenticationService service) {
        this.centralAuthenticationService = service;
    }
 
    /**
     * 取得同一用户下需要注销的tgt(即除了当前tgt外的该用户的所有tgt)
     * @param userId
     * @param tgtId
     * @param clientIp
     * @return
     */
    public Collection<Ticket> getKictOutTickets(String userId, String tgtId, String clientIp) {
        Collection<Ticket> tickets = this.centralAuthenticationService.getTickets(ticket -> {
            if (ticket instanceof TicketGrantingTicket) {
                TicketGrantingTicket tgt = ((TicketGrantingTicket) ticket).getRoot();
                Authentication authentication = tgt.getAuthentication();
 
                // //DEBUG
                LOGGER.debug("#####ALL LGOINED USER: [{}], TGT:[{}], DATE:[{}], CLIENT IP:[{}]",
                        authentication.getPrincipal().getId(), tgt.getId(),
                        authentication.getAuthenticationDate().format(DateTimeFormatter.ISO_LOCAL_DATE_TIME),
                        authentication.getAttributes().get("clientIp"));
                
                // //DEBUG
                System.out.println("#####ALL LGOINED USER: [{}], TGT:[{}], DATE:[{}], CLIENT IP:[{}]"+
                        authentication.getPrincipal().getId()+"-"+tgt.getId()+"-"+
                        authentication.getAuthenticationDate().format(DateTimeFormatter.ISO_LOCAL_DATE_TIME)+"-"+
                        authentication.getAttributes().get("clientIp"));
 
                Principal a = authentication.getPrincipal();
                return tgt != null && authentication != null && a != null
                        && userId.equals(a.getId())
                        && (singleLoginProperties.isIgnoreSameIp()
                                ? !clientIp.equals(authentication.getAttributes().get("clientIp")) : true)
                        && (StringUtils.isBlank(tgtId) ? true : !tgtId.equals(tgt.getId()));
            } else {
                return false;
            }
 
        });
        return tickets;
    }
 
    public Collection<Ticket> getKictOutTickets(String userId, String clientIp) {
        return getKictOutTickets(userId, null, clientIp);
    }
 
    /**
     * 踢出用户上次未退出的登录
     * @param userId
     * @param tgtId
     * @param clientIp
     */
    public void kickOutOldLogins(String userId, String tgtId, String clientIp) {
        Collection<Ticket> tickets = this.getKictOutTickets(userId, tgtId, clientIp);
        if (tickets != null && tickets.size() > 0) {
            LOGGER.warn("#####【单用户登录限制】正在注销 [{}]用户的 {}个Ticket", userId, tickets.size());
        }
 
        // 注销
        for (Ticket ticket : tickets) {
            LOGGER.warn("#####【单用户登录限制】注销Ticket: [{}]", ticket.getId());
            centralAuthenticationService.destroyTicketGrantingTicket(ticket.getId());
        }
 
    }
 
    public void kickOutOldLogins(TicketGrantingTicket tgt) {
        if (tgt != null) {
            String userId = tgt.getAuthentication().getPrincipal().getId();
            String tgtId = tgt.getId();
            String clientName = (String) tgt.getAuthentication().getAttributes().get("clientName");
            String clientIp = (String) tgt.getAuthentication().getAttributes().get("clientIp");
            List<String> userIds = userIdObtainService.obtain(clientName, userId);
            if (userIds != null) {
                userIds.forEach(uid -> kickOutOldLogins(uid, tgtId, clientIp));
            }
        }
    }
 
}