--
package cn.iigrowing.study.sso.cas.support.oauth;

import org.scribe.builder.api.DefaultApi20;
import org.scribe.extractors.AccessTokenExtractor;
import org.scribe.extractors.JsonTokenExtractor;
import org.scribe.model.OAuthConfig;
import org.scribe.model.Verb;
import org.scribe.utils.OAuthEncoder;

public class SinaWeiboApi20 extends DefaultApi20 {
 private static final String AUTHORIZE_URL = "https://api.weibo.com/oauth2/authorize?client_id=%s&redirect_uri=%s&response_type=code";
 private static final String SCOPED_AUTHORIZE_URL = AUTHORIZE_URL + "&scope=%s";

 @Override
 public Verb getAccessTokenVerb() {
 return Verb.POST;
 }

 @Override
 public AccessTokenExtractor getAccessTokenExtractor() {
 return new JsonTokenExtractor();
 }

 @Override
 public String getAccessTokenEndpoint() {
 return "https://api.weibo.com/oauth2/access_token?grant_type=authorization_code";
 }

 @Override
 public String getAuthorizationUrl(OAuthConfig config) {
 // Append scope if present
 if (config.hasScope()) {
 return String.format(SCOPED_AUTHORIZE_URL, config.getApiKey(), OAuthEncoder.encode(config.getCallback()),
 OAuthEncoder.encode(config.getScope()));
 } else {
 return String.format(AUTHORIZE_URL, config.getApiKey(), OAuthEncoder.encode(config.getCallback()));
 }
 }
}

SinaWeiboProvider.java

 --
package cn.iigrowing.study.sso.cas.support.oauth;

import org.scribe.builder.ServiceBuilder;
import org.scribe.up.profile.JsonHelper;
import org.scribe.up.profile.UserProfile;
import org.scribe.up.provider.BaseOAuth20Provider;
import org.scribe.up.provider.BaseOAuthProvider;

import com.fasterxml.jackson.databind.JsonNode;

public class SinaWeiboProvider extends BaseOAuth20Provider {
 @Override
 protected void internalInit() {
 service = new ServiceBuilder().provider(SinaWeiboApi20.class).apiKey(key).apiSecret(secret)
 .callback(callbackUrl).build();
 }

 @Override
 protected String getProfileUrl() {
 return "https://api.weibo.com/2/statuses/user_timeline.json";
 }

 @Override
 protected UserProfile extractUserProfile(String body) {
 final UserProfile profile = new UserProfile();
 logger.info("========= extractUserProfile Method body:" + body);
 final JsonNode json = JsonHelper.getFirstNode(body);
 if (null != json) {
 for (final String attribute : attrs) {
 profile.addAttribute(attribute, JsonHelper.get(json, attribute).toString());
 }
 }
 return profile;
 }

 String[] attrs = { "id", "idstr", "screen_name", "name", "gender", "location", "profile_image_url", "avatar_large",
 "avatar_hd" };

 @Override
 protected BaseOAuthProvider newProvider() {
 // TODO Auto-generated method stub
 return null;
 }
}
 --

 添加SinaWeiboProvider bean声明到applicationContext.xml<bean id="sinaWeibo" class="com.xxx.oauth.provider.SinaWeiboProvider">
 <property name="key" value="sinaweibo_key" />
 <property name="secret" value="sinaweibo_secret" />
 <property name="callbackUrl" value="https://sso.xxx.com:9443/login" />
 </bean>
 其中callbackUrl为你cas的登录地址。

在cas-servlet.xml 中定义OAuthAction bean

<bean id="oauthAction" class="org.jasig.cas.support.oauth.web.flow.OAuthAction"
p:centralAuthenticationService-ref="centralAuthenticationService"  >
<property name="providers">
<list>
<ref bean="sinaWeibo" />
</list>
</property>
</bean>
添加oauthAction到cas的login-webflow.xml中，其主要功能是拦截oauth服务商返回的信息。

<action-state id="oauthAction">
<evaluate expression="oauthAction" />
<transition on="success" to="sendTicketGrantingTicket" />
<transition on="error" to="ticketGrantingTicketExistsCheck" />
</action-state>
添加OAuthAuthenticationHandler到deployerConfigContext.xml 中的authenticationHandlers处，使其支持oauth验证

<property name="authenticationHandlers">
<list>
<bean class="org.jasig.cas.support.oauth.authentication.handler.support.OAuthAuthenticationHandler">
<property name="providers">
<list>
<ref bean="sinaWeibo" />
</list>
</property>
</bean>
</list>
</property>
添加OAuthCredentialsToPrincipalResolver 到deployerConfigContext.xml中的credentialsToPrincipalResolvers处。

<property name="credentialsToPrincipalResolvers">
<list>
<bean class="org.jasig.cas.support.oauth.authentication.principal.OAuthCredentialsToPrincipalResolver" >
</bean>
</list>
</property>
如果想获取从oauth返回的用户信息，就必须添加OAuthAuthenticationMetaDataPopulator到deployerConfigContext.xml中authenticationMetaDataPopulators处。
<property name="authenticationMetaDataPopulators">
<list>
<bean class="org.jasig.cas.support.oauth.authentication.OAuthAuthenticationMetaDataPopulator" />
</list>
</property>
最后一步就添加用新浪微博账号登录的链接到登录页面

<a href="${SinaWeiboProviderUrl}">用新浪微博登录</a>