Spring Security SAML DSL连续重定向

时间:2019-04-15 20:49:07

标签: saml-2.0 spring-saml spring-security-saml2

启动时的Spring Boot应用如下所示:

2019-04-15 21:38:39.745  INFO 9532 --- [  restartedMain] o.s.s.web.DefaultSecurityFilterChain     : Creating filter chain: Ant [pattern='/saml/login/**'], [tesco.finance.gss.remify.saml.SAMLDslEntryPoint@3e7e381]
2019-04-15 21:38:39.745  INFO 9532 --- [  restartedMain] o.s.s.web.DefaultSecurityFilterChain     : Creating filter chain: Ant [pattern='/saml/logout/**'], [org.springframework.security.saml.SAMLLogoutFilter@61fba95]
2019-04-15 21:38:39.746  INFO 9532 --- [  restartedMain] o.s.s.web.DefaultSecurityFilterChain     : Creating filter chain: Ant [pattern='/saml/metadata/**'], [org.springframework.security.saml.metadata.MetadataDisplayFilter@38303daa]
2019-04-15 21:38:39.746  INFO 9532 --- [  restartedMain] o.s.s.web.DefaultSecurityFilterChain     : Creating filter chain: Ant [pattern='/remify/saml/SSOHoK/**'], [org.springframework.security.saml.SAMLProcessingFilter@1b07d54d]
2019-04-15 21:38:39.746  INFO 9532 --- [  restartedMain] o.s.s.web.DefaultSecurityFilterChain     : Creating filter chain: Ant [pattern='/saml/SingleLogout/**'], [org.springframework.security.saml.SAMLLogoutProcessingFilter@2740d647]
2019-04-15 21:38:39.746  INFO 9532 --- [  restartedMain] o.s.s.web.DefaultSecurityFilterChain     : Creating filter chain: Ant [pattern='/saml/discovery/**'], [org.springframework.security.saml.SAMLDiscovery@5cf00b28]

Http配置为:

@Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/saml/**").permitAll()
                .antMatchers("/remify/saml/SSOHoK/**").permitAll()
                .anyRequest().authenticated()
                .and()
            .apply(saml())
                .serviceProvider()
                    .keyStore()
                        .storeFilePath("classpath:keys/keystore.jks")
                        .password("secret")
                        .keyname("remify")
                        .keyPassword("secret")
                        .and()
                    .protocol("http")
                    .hostname("dvgssjensl001uk.dev.global.tesco.org:80")
                    .basePath("/")
                    .entityId("remify")
                    .and()
                .identityProvider()
                    .metadataFilePath(metadataUrl)
                    .discoveryEnabled(true)
                    .and();
    }

我正在查看SAMLDefaulLogger的日志

<saml2p:AuthnRequest AssertionConsumerServiceURL="http://dvgssjensl001uk.dev.global.tesco.org:80/remify/saml/SSOHoK" Destination="https://loginppe.ourtesco.com/trust/saml2/http-redirect/sso/362584" ForceAuthn="false" ID="a3f854c0fa7g2fji11b7gbe7785e854" IsPassive="false" IssueInstant="2019-04-15T20:41:29.895Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">remify</saml2:Issuer></saml2p:AuthnRequest>;
2019-04-15 21:41:31.693  INFO 9532 --- [p-nio-80-exec-5] o.s.security.saml.log.SAMLDefaultLogger  : AuthNRequest;SUCCESS;192.168.29.236;remify;https://app-eu.onelogin.com/saml/metadata/09b2122c-2891-47d4-95e2-97587680404f;;<?xml version="1.0" encoding="UTF-8"?>
<saml2p:AuthnRequest AssertionConsumerServiceURL="http://dvgssjensl001uk.dev.global.tesco.org:80/remify/saml/SSOHoK" Destination="https://loginppe.ourtesco.com/trust/saml2/http-redirect/sso/362584" ForceAuthn="false" ID="a1ga1gjh122ii47i29ifc183df50cgb" IsPassive="false" IssueInstant="2019-04-15T20:41:31.685Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">remify</saml2:Issuer></saml2p:AuthnRequest>;
2019-04-15 21:42:41.967  INFO 9532 --- [p-nio-80-exec-4] o.s.security.saml.log.SAMLDefaultLogger  : AuthNRequest;SUCCESS;192.168.29.236;remify;https://app-eu.onelogin.com/saml/metadata/09b2122c-2891-47d4-95e2-97587680404f;;<?xml version="1.0" encoding="UTF-8"?>
<saml2p:AuthnRequest AssertionConsumerServiceURL="http://dvgssjensl001uk.dev.global.tesco.org:80/remify/saml/SSOHoK" Destination="https://loginppe.ourtesco.com/trust/saml2/http-redirect/sso/362584" ForceAuthn="false" ID="a27g7d815efa8f8a51ba878di7f7d4" IsPassive="false" IssueInstant="2019-04-15T20:42:41.958Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">remify</saml2:Issuer></saml2p:AuthnRequest>;
2019-04-15 21:42:44.265  INFO 9532 --- [p-nio-80-exec-5] o.s.security.saml.log.SAMLDefaultLogger  : AuthNRequest;SUCCESS;192.168.29.236;remify;https://app-eu.onelogin.com/saml/metadata/09b2122c-2891-47d4-95e2-97587680404f;;<?xml version="1.0" encoding="UTF-8"?>
<saml2p:AuthnRequest AssertionConsumerServiceURL="http://dvgssjensl001uk.dev.global.tesco.org:80/remify/saml/SSOHoK" Destination="https://loginppe.ourtesco.com/trust/saml2/http-redirect/sso/362584" ForceAuthn="false" ID="a3ad2ic2eihdja821368fi88g7379jg" IsPassive="false" IssueInstant="2019-04-15T20:42:44.245Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">remify</saml2:Issuer></saml2p:AuthnRequest>;
2019-04-15 21:42:46.142  INFO 9532 --- [p-nio-80-exec-6] o.s.security.saml.log.SAMLDefaultLogger  : AuthNRequest;SUCCESS;192.168.29.236;remify;https://app-eu.onelogin.com/saml/metadata/09b2122c-2891-47d4-95e2-97587680404f;;<?xml version="1.0" encoding="UTF-8"?>
<saml2p:AuthnRequest AssertionConsumerServiceURL="http://dvgssjensl001uk.dev.global.tesco.org:80/remify/saml/SSOHoK" Destination="https://loginppe.ourtesco.com/trust/saml2/http-redirect/sso/362584" ForceAuthn="false" ID="a2ab3h397ieb33j943ae056fi2gi36" IsPassive="false" IssueInstant="2019-04-15T20:42:46.134Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">remify</saml2:Issuer></saml2p:AuthnRequest>;
2019-04-15 21:42:48.423  INFO 9532 --- [p-nio-80-exec-7] o.s.security.saml.log.SAMLDefaultLogger  : AuthNRequest;SUCCESS;192.168.29.236;remify;https://app-eu.onelogin.com/saml/metadata/09b2122c-2891-47d4-95e2-97587680404f;;<?xml version="1.0" encoding="UTF-8"?>
<saml2p:AuthnRequest AssertionConsumerServiceURL="http://dvgssjensl001uk.dev.global.tesco.org:80/remify/saml/SSOHoK" Destination="https://loginppe.ourtesco.com/trust/saml2/http-redirect/sso/362584" ForceAuthn="false" ID="a4cc456d6702001349ib74b19928g03" IsPassive="false" IssueInstant="2019-04-15T20:42:48.410Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">remify</saml2:Issuer></saml2p:AuthnRequest>;

0 个答案:

没有答案