Spring Boot 和 SAML 2.0

使用Spring Boot和SAML 2.0实现单点登录

xml
    org.springframework.boot
    spring-boot-starter-security
    org.springframework.security.extensions
    spring-security-saml2-core

properties
# SAML相关配置
saml2.metadata-url=https://idp.example.com/metadata
saml2.entity-id=https://sp.example.com/metadata
saml2.signing-key=classpath:/saml/keystore.jks
saml2.signing-key-password=secret
saml2.encryption-key=classpath:/saml/keystore.jks
saml2.encryption-key-password=secret

java
@Configuration
@EnableWebSecurity
public class SamlSecurityConfig extends WebSecurityConfigurerAdapter {
    @Autowired
    private SAMLUserDetailsService samlUserDetailsService;
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/saml/**").permitAll()
                .anyRequest().authenticated()
                .and()
            .apply(saml())
                .userDetailsService(samlUserDetailsService);
    }
    @Bean
    public SAMLConfigurer saml() {
        return new SAMLConfigurer();
    }
}

java
@Service
public class SAMLUserDetailsServiceImpl implements SAMLUserDetailsService {
    @Override
    public Object loadUserBySAML(SAMLCredential credential) throws UsernameNotFoundException {
        // 根据SAML凭证获取用户信息
        String username = credential.getNameID().getValue();
        // 在此处根据用户名查询数据库或其他系统获取用户详细信息
        // 然后返回一个实现了UserDetails接口的用户对象
        return new User(username, "", new ArrayList<>());
    }
}