JWT:
阮一峰：http://www.ruanyifeng.com/blog/2018/07/json_web_token-tutorial.html
https://blog.csdn.net/qq_40081976/article/details/79046825
https://blog.csdn.net/achenyuan/article/details/80829401
OAUTH2与JWT:
https://www.jianshu.com/p/1f2d6e5126cb
讨论：https://www.oschina.net/question/1015065_2278240?from=mail-notify https://neue.v2ex.com/t/439613
SSO:
最透彻、全面、带流程图、伪代码和GitHub实例的一篇：https://www.cnblogs.com/ywlaker/p/6113927.html
Tomcat/CAS相关：https://blog.csdn.net/shmilychan/article/details/73656857