迁移 CasSsoService 源码并按 CAS war overlay 形态适配 CI
build / build-push (push) Successful in 4m8s

- 复制 CAS 5.3.16 overlay 源码(src/、pom.xml、etc/cas/config/log4j2.xml、docker/cas.properties)及本地构建辅助(build.cmd/build.sh/maven-settings.xml)
- build.yml:maven 产物由 jar 改为 war(cp cas.war app.jar),CI 内源码构建,摆脱 174MB war blob 入库
- Dockerfile:CAS 专用镜像(自签名 keystore 8443 HTTPS + 内置 cas.properties/log4j2.xml + JAVA_OPTS 注入)
- pom.xml:移除 sonatype/shibboleth 外网仓库,依赖全部经 nexus maven-public 解析
- 前端 front/ 不入库(CasSsoFront 仓库独立发布)
This commit is contained in:
2026-08-31 18:55:29 +08:00
parent 7d8f033f11
commit d6583f49f9
24 changed files with 2623 additions and 55 deletions
@@ -0,0 +1,44 @@
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="utf-8" />
<title>请稍候</title>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Expires" content="0" />
</head>
<body>
<!--
覆盖 CAS 原生 casGenericSuccessView.html:已有有效 TGT 后再访问 /cas/login(无 service)
时,CAS 不再渲染默认"您已经成功登录中央认证系统"页,而是自动跳转到配置的默认落点
(custom.login.default-redirect-url,即 base.yunhaixingtong.com)。
跳转地址复用 /cas/api/check-sso 的返回(跟随 Nacos 配置,不硬编码);接口异常时兜底。
-->
<script>
(function () {
var fallback = "https://base.yunhaixingtong.com";
try {
var xhr = new XMLHttpRequest();
xhr.open("GET", "/cas/api/check-sso", true);
xhr.onreadystatechange = function () {
if (xhr.readyState !== 4) return;
try {
var resp = JSON.parse(xhr.responseText);
if (resp && resp.code == 0 && resp.data && resp.data.url) {
window.location.replace(resp.data.url);
return;
}
} catch (e) { /* 兜底 */ }
window.location.replace(fallback);
};
xhr.send();
} catch (e) {
window.location.replace(fallback);
}
})();
</script>
</body>
</html>