final String queryString = request.getQueryString();

final String url = request.getContextPath() +"/login" + (queryString!= null ?"?" + queryString : "");

response.sendRedirect(response.encodeURL(url));

<!-- 根据工作流定义，生成一个执行器 -->

    <webflow:flow-executorid="flowExecutor"flow-registry="flowRegistry">

        <webflow:flow-execution-attributes>

            <webflow:always-redirect-on-pausevalue="false"/>

        </webflow:flow-execution-attributes>

    </webflow:flow-executor>

 

<!-- 注册一个工作流 id是子路径 为flow入口对login的请求交由login-webflow.xml定义的处理器进行处理-->

    <webflow:flow-registryid="flowRegistry"flow-builder-services="builder">

        <webflow:flow-locationpath="/WEB-INF/login-webflow.xml"id="login"/>

    </webflow:flow-registry>

 

<webflow:flow-builder-servicesid="builder"view-factory-creator="viewFactoryCreator"expression-parser="expressionParser"/>

<transition on="submit" bind="true" validate="true" to="realSubmit">

            <set name="flowScope.credentials"value="credentials" />

            <evaluate expression="authenticationViaFormAction.doBind(flowRequestContext,flowScope.credentials)" />

       </transition>

  final String serviceTicketId = this.centralAuthenticationService.grantServiceTicket(ticketGrantingTicketId, service,credentials);

                WebUtils.putServiceTicketInRequestScope(context, serviceTicketId);

               putWarnCookieIfRequestParameterPresent(context);

                return "warn";

           final Authenticationauthentication = this.authenticationManager.authenticate(credentials);

           finalTicketGrantingTicket ticketGrantingTicket= new TicketGrantingTicketImpl(

                this.ticketGrantingTicketUniqueTicketIdGenerator

                   .getNewTicketId(TicketGrantingTicket.PREFIX),

                authentication, this.ticketGrantingTicketExpirationPolicy);

            this.ticketRegistry.addTicket(ticketGrantingTicket);

            return ticketGrantingTicket.getId();

<bean id="authenticationManager"

      class="org.jasig.cas.authentication.AuthenticationManagerImpl">

      <!--credentialsToPrincipalResolvers主要是干两件事儿，

        一是确认用户要授权，在默认配置中用的DefaultCredentialsToPrincipalResolver来填充角色

        二是用这些分解器确认一个服务请求代理票据验证。这个需要明确的是代理登录流程        +-->

      <property name="credentialsToPrincipalResolvers">

        <list>

           <!--这个UsernamePasswordCredentials是支持用户名密码登录的解析器。如果采用其他的认证方式，那么需要替换解析器。这种解析器需要支持这种认证方式

           +-->

           <bean         class="org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver">

              <property name="attributeRepository">

                 <ref local="attributeRepository"/>

               </property>

           </bean>

          

           <!--这个类是表示支持http或是https协议的。他可以从URL获取凭证，并且可以根据回调地址获取服务地址。如果采用其他的通讯协议，可以进行相应的替换+-->

           <bean class="org.jasig.cas.authentication.principal.HttpBasedServiceCredentialsToPrincipalResolver"/>

        </list>

      </property>

      <!--这里的list主要是维护了一个认证器链，用来对用户提交的认证信息进行认证。

   +-->

      <property name="authenticationHandlers">

        <list>

           <bean class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler"

              p:httpClient-ref="httpClient"/>

           <bean  class="org.jasig.cas.adaptors.jdbc.QueryDatabaseAuthenticationHandler">

                <property name="dataSource"ref="dataSource" />

                <property name="sql"value="select USER_PASSWORD fromt_sso_userinfo where USER_NAME=? " />

               </bean> 

             

        </list>

      </property>

   </bean>

//通过验证器链对用户提供的认证信息进行认证

        for (final AuthenticationHandlerauthenticationHandler : this.authenticationHandlers) {

            if(authenticationHandler.supports(credentials)) {

                foundSupported = true;

                if(!authenticationHandler.authenticate(credentials)) {

                    。。。。。

                } else {

                   。。。。。

                    authenticatedClass =authenticationHandler;

                    authenticated = true;

                    break;

                }

            }

        }

foundSupported = false;

        //认证成功之后，通过认证信息，提取出用户的完整信息

        for (finalCredentialsToPrincipalResolver credentialsToPrincipalResolver : this.credentialsToPrincipalResolvers) {

            if(credentialsToPrincipalResolver.supports(credentials)) {

                final Principal principal =credentialsToPrincipalResolver

                   .resolvePrincipal(credentials);

                foundSupported = true;

                if (principal != null) {

                    return new Pair<AuthenticationHandler,Principal>(authenticatedClass,principal);

                }

            }

       }

final Stringusername = getPrincipalNameTransformer().transform(credentials.getUsername());

        final String password =credentials.getPassword();

        final String encryptedPassword = this.getPasswordEncoder().encode(

            password);

       

        try {

            final String dbPassword =getJdbcTemplate().queryForObject(

                this.sql, String.class,username);

            returndbPassword.equals(encryptedPassword);

        } catch (finalIncorrectResultSizeDataAccessException e) {

            // this means the username was notfound.

            return false;

        }