javaEE開發中用到的CAS單點登陸

小弟今日在本地聯調一個應用  請求另外一個應用，很是順利，但已放到sit環境就不行了。百思不得姐呀。

這可不行。放大招！查日誌

這一查才知道http請求竟然報302 錯誤 ，但是爲啥呢。兩個應用雖然在不一樣的tomcat下，但都在一個服務器中呢。

後臺切換分支到sit上 本地啓動也不能訪問，邪門了。放終極大招。重頭查器。終於在web.xml中找到了蛛絲馬跡，這個應用竟然引用了CAS

<filter>
        <filter-name>CAS Single Sign Out Filter</filter-name>
        <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>CAS Single Sign Out Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter>
        <filter-name>CAS Authentication Filter</filter-name>
        <!-- <filter-class>
            org.jasig.cas.client.authentication.AuthenticationFilter
        </filter-class> -->
        <filter-class>
            com.esoft.core.filter.AuthenticationFilter
        </filter-class>
        <init-param>
            <param-name>casServerLoginUrl</param-name>
            <param-value>
               http://127.0.0.1:7070/cas/login
            </param-value>
        </init-param>
        <!-- <init-param>
            <param-name>ignorePattern</param-name>  
           <param-value>/createLoan*|/loginIn*|/handleAfterInvestSaleLoan*|/organizationCompen*|/repayThaw*</param-value> 
        </init-param> -->
        <init-param>
            <param-name>excludePaths</param-name>  
           <param-value>createLoan,loginIn,handleAfterInvestSaleLoan,organizationCompen,repayThaw,repayNotFreeze,createLoanAndInvestBill,allBillResultFileDownloadByTodayStr,billDetailResultFileDownloadByTodayStr,bankAllBillDownload,initEnterpriseCallback,insertEnterpriseNotify,aduitEnterpriseFinalNotify,enterpriseBindBankCardNotify,userBalance,hBank</param-value> 
        </init-param>
        <init-param>
            <param-name>renew</param-name>
            <param-value>false</param-value>
        </init-param>
        <init-param>
            <param-name>gateway</param-name>
            <param-value>false</param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value>http://127.0.0.1:7070</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>CAS Authentication Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter>
        <filter-name>CAS Validation Filter</filter-name>
        <filter-class>
            org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter
        </filter-class>
        <init-param>
            <param-name>casServerUrlPrefix</param-name>
            <param-value>http://127.0.0.1:7070/cas</param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value>http://127.0.0.1:7070</param-value>
        </init-param>
        <init-param>
            <param-name>useSession</param-name>
            <param-value>true</param-value>
        </init-param>
        <init-param>
            <description>不攔截的請求(以逗號分隔，只要包含其中一個就不過濾)</description>
            <param-name>excludePaths</param-name>  
           <param-value>createLoan,loginIn</param-value> 
        </init-param>
        <init-param>
            <param-name>redirectAfterValidation</param-name>
            <param-value>true</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>CAS Validation Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter>
        <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
        <filter-class>
            org.jasig.cas.client.util.HttpServletRequestWrapperFilter
        </filter-class>
    </filter>
    <filter-mapping>
        <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter>
        <filter-name>CAS Assertion Thread Local Filter</filter-name>
        <filter-class>
            org.jasig.cas.client.util.AssertionThreadLocalFilter
        </filter-class>
    </filter>

重點是這句：

這裏配置了能夠訪問的URL字段。致使新增的接口沒法經過CAS驗證。。。

具體CAS配置 詳情請見http://blog.csdn.net/cb2474600377/article/details/50820133。