CAS single sign-on used in javaEE development

Today, my brother jointly debugged an application locally and requested another application, which was very smooth, but it would not work if it was placed in the sit environment. Miss best.

This will not work. Zoom in! Check log

Only after this investigation did I know that the http request actually reported a 302 error, but why? Although the two applications are under different tomcats, they are both in the same server.

Switching the branch in the background to the local startup on the sit cannot be accessed, which is evil. Put the ultimate move. Check again. Finally found clues in web.xml, this application actually references CAS

<filter>
        <filter-name>CAS Single Sign Out Filter</filter-name>
        <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>CAS Single Sign Out Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter>
        <filter-name>CAS Authentication Filter</filter-name>
        <!-- <filter-class>
            org.jasig.cas.client.authentication.AuthenticationFilter
        </filter-class> -->
        <filter-class>
            com.esoft.core.filter.AuthenticationFilter
        </filter-class>
        <init-param>
            <param-name>casServerLoginUrl</param-name>
            <param-value>
               http://127.0.0.1:7070/cas/login
            </param-value>
        </init-param>
        <!-- <init-param>
            <param-name>ignorePattern</param-name>  
           <param-value>/createLoan*|/loginIn*|/handleAfterInvestSaleLoan*|/organizationCompen*|/repayThaw*</param-value> 
        </init-param> -->
        <init-param>
            <param-name>excludePaths</param-name>  
           <param-value>createLoan,loginIn,handleAfterInvestSaleLoan,organizationCompen,repayThaw,repayNotFreeze,createLoanAndInvestBill,allBillResultFileDownloadByTodayStr,billDetailResultFileDownloadByTodayStr,bankAllBillDownload,initEnterpriseCallback,insertEnterpriseNotify,aduitEnterpriseFinalNotify,enterpriseBindBankCardNotify,userBalance,hBank</param-value> 
        </init-param>
        <init-param>
            <param-name>renew</param-name>
            <param-value>false</param-value>
        </init-param>
        <init-param>
            <param-name>gateway</param-name>
            <param-value>false</param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value>http://127.0.0.1:7070</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>CAS Authentication Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter>
        <filter-name>CAS Validation Filter</filter-name>
        <filter-class>
            org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter
        </filter-class>
        <init-param>
            <param-name>casServerUrlPrefix</param-name>
            <param-value>http://127.0.0.1:7070/cas</param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value>http://127.0.0.1:7070</param-value>
        </init-param>
        <init-param>
            <param-name>useSession</param-name>
            <param-value>true</param-value>
        </init-param>
        <init-param>
            <description>不拦截的请求(以逗号分隔，只要包含其中一个就不过滤)</description>
            <param-name>excludePaths</param-name>  
           <param-value>createLoan,loginIn</param-value> 
        </init-param>
        <init-param>
            <param-name>redirectAfterValidation</param-name>
            <param-value>true</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>CAS Validation Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter>
        <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
        <filter-class>
            org.jasig.cas.client.util.HttpServletRequestWrapperFilter
        </filter-class>
    </filter>
    <filter-mapping>
        <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter>
        <filter-name>CAS Assertion Thread Local Filter</filter-name>
        <filter-class>
            org.jasig.cas.client.util.AssertionThreadLocalFilter
        </filter-class>
    </filter>

The point is this:

The accessible URL fields are configured here. As a result, the newly added interface cannot pass CAS verification. . .

Please refer to http://blog.csdn.net/cb2474600377/article/details/50820133 for specific CAS configuration details.