轻松搭建CAS 5.x系列(5)-增加密码找回和密码修改功能

概述说明

CAS内置了密码找回和密码修改的功能；密码找回功能是，系统会吧密码重置的连接通过邮件或短信方式发送给用户，用户点击链接后就可以重置密码，cas还支持预留密码重置的问题，只有回答对了，才可以重置密码；系统可配置密码重置后，是否自动登录；密码修改功能是，用户登录后输入新密码即可完成密码修改。

安装步骤

`1. 首先，搭建好cas sso server

您需要按照《轻松搭建CAS 5.x系列文章》系列的前3篇文章

-2. 数据库增加用户的email字段和密码找回的安全问题表

--创建数据库表空间

USE test_cas;

--创建帐号信息表

DROP TABLE IF EXISTS `cas_user_base`;

CREATE TABLE `cas_user_base` (

  `id` INT(11) NOT NULL AUTO_INCREMENT,

  `user_name` VARCHAR(45) DEFAULT NULL,

  `user_psd` VARCHAR(45) DEFAULT NULL,

  `user_email` VARCHAR(255) DEFAULT NULL,

  PRIMARY KEY (`id`)

);

--插入登录帐号数据

INSERT INTO `cas_user_base` VALUES (1,'admin','','chenshiming0802@163.com');

DROP TABLE IF EXISTS `cas_user_psdquestion`;

CREATE TABLE `cas_userpsd_question` (

  `id` INT(11) NOT NULL AUTO_INCREMENT,

  `user_id` INT(11) NOT NULL ,

  `question` VARCHAR(255) DEFAULT NULL,

  `answer` VARCHAR(255) DEFAULT NULL,

  PRIMARY KEY (`id`)

);

--插入登录帐号数据

INSERT INTO `cas_user_psdquestion` VALUES (1,1,'Your Name','jpeanut');

-3. 在pom.xml增加依赖包cas-server-support-pm-jdbc

        <!-- Password Management JDBC Begin -->

        <dependency>

            <groupId>org.apereo.cas</groupId>

            <artifactId>cas-server-support-pm-jdbc</artifactId>

            <version>${cas.version}</version>

        </dependency>

        <!-- Password Management JDBC End -->

-4. application.properties增加密码找回的配置

（该文件所在目录：D:\casoverlay\cas-overlay-template\src\main\resources）

cas.authn.pm.jdbc.sqlSecurityQuestions=SELECT t2.question,t2.answer FROM cas_user_base t1,cas_userpsd_question t2 WHERE t1.id=t2.user_id AND t1.user_name=?

cas.authn.pm.jdbc.sqlFindEmail=SELECT t1.user_email FROM cas_user_base t1 WHERE t1.user_name=?

cas.authn.pm.jdbc.sqlChangePassword=UPDATE cas_user_base SET user_psd=? WHERE user_name=?

cas.authn.pm.jdbc.healthQuery= SELECT 1

cas.authn.pm.jdbc.isolateInternalQueries=false

cas.authn.pm.jdbc.url=jdbc:mysql://localhost:3306/test_cas?useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&useSSL=false&serverTimezone=UTC

cas.authn.pm.jdbc.failFastTimeout=1

cas.authn.pm.jdbc.isolationLevelName=ISOLATION_READ_COMMITTED

#cas.authn.pm.jdbc.dialect=org.hibernate.dialect.HSQLDialect

cas.authn.pm.jdbc.dialect=org.hibernate.dialect.MySQLDialect

cas.authn.pm.jdbc.leakThreshold=10

cas.authn.pm.jdbc.propagationBehaviorName=PROPAGATION_REQUIRED

cas.authn.pm.jdbc.batchSize=1

cas.authn.pm.jdbc.user=root

cas.authn.pm.jdbc.ddlAuto=create-drop

cas.authn.pm.jdbc.maxAgeDays=180

cas.authn.pm.jdbc.password=

cas.authn.pm.jdbc.autocommit=false

#cas.authn.pm.jdbc.driverClass=org.hsqldb.jdbcDriver

cas.authn.pm.jdbc.driverClass=com.mysql.jdbc.Driver

cas.authn.pm.jdbc.idleTimeout=5000

cas.authn.pm.jdbc.dataSourceName=

cas.authn.pm.jdbc.dataSourceProxy=false

cas.authn.pm.jdbc.properties.propertyName=propertyValue

spring.mail.host=smtp.163.com

spring.mail.port=25

spring.mail.username=chenshiming0802@163.com

spring.mail.password=xxxxxxx  #请输入发送邮件的密码

spring.mail.testConnection=true

spring.mail.properties.mail.smtp.auth=true

spring.mail.properties.mail.smtp.starttls.enable=true

cas.authn.pm.enabled=true

# Minimum 8 and Maximum 10 characters at least 1 Uppercase Alphabet, 1 Lowercase Alphabet, 1 Number and 1 Special Character

cas.authn.pm.policyPattern=^(?=.*[a-z])(?=.*[A-Z])(?=.*\\d)(?=.*[$@$!%*?&])[A-Za-z\\d$@$!%*?&]{8,10}

cas.authn.pm.reset.text=Reset your password with this link: %s

cas.authn.pm.reset.subject=Password Reset Request

cas.authn.pm.reset.from=chenshiming0802@163.com

cas.authn.pm.reset.expirationMinutes=1

cas.authn.pm.reset.emailAttribute=mail

cas.authn.pm.reset.securityQuestionsEnabled=true

# Automatically log in after successful password change

cas.authn.pm.autoLogin=false

# Used to sign/encrypt the password-reset link

cas.authn.pm.reset.crypto.encryption.key=

cas.authn.pm.reset.crypto.signing.key=

cas.authn.pm.reset.crypto.enabled=true