首页 > 代码库 > SpringSecurity 3.2入门(2)环境搭建

SpringSecurity 3.2入门(2)环境搭建

  由于目前Spring官方只提供Meven的下载方式,为了能以最快的速度入门使用框架,这里提供百度网盘下载链接。

  注:本入门教程默认已经配置成功SpringMVC框架。

1、web.xml配置

<!-- 加载Spring的配置文件 --><context-param>    <param-name>contextConfigLocation</param-name>    <param-value>        classpath:applicationContext.xml,        classpath:spring-security.xml    </param-value></context-param><!-- SpringSecurity 核心过滤器配置 --><filter>     <filter-name>springSecurityFilterChain</filter-name>      <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>  </filter><filter-mapping>    <filter-name>springSecurityFilterChain</filter-name>    <url-pattern>/*</url-pattern>  </filter-mapping>

2、spring-security.xml命名空间配置

  官方提供了两种配置方案

  第一种、命名空间用beans开头,但是在配置中一直需要用<security:*>来配置,本教程将采用这种配置。

<?xml version="1.0" encoding="UTF-8"?><beans xmlns="http://www.springframework.org/schema/beans"    xmlns:security="http://www.springframework.org/schema/security"    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"    xsi:schemaLocation="http://www.springframework.org/schema/beans              http://www.springframework.org/schema/beans/spring-beans-3.0.xsd              http://www.springframework.org/schema/security              http://www.springframework.org/schema/security/spring-security-3.1.xsd">    ...</beans>

  第二种、命名空间用security开头,在配置中不需要security前缀,但是bean的配置需要用<beans:bean>配置。

<beans:beans xmlns="http://www.springframework.org/schema/security"  xmlns:beans="http://www.springframework.org/schema/beans"  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"  xsi:schemaLocation="http://www.springframework.org/schema/beans           http://www.springframework.org/schema/beans/spring-beans-3.0.xsd           http://www.springframework.org/schema/security           http://www.springframework.org/schema/security/spring-security.xsd">    ...</beans:beans>

3、spring-security.xml详细配置

<?xml version="1.0" encoding="UTF-8"?><beans xmlns="http://www.springframework.org/schema/beans"    xmlns:security="http://www.springframework.org/schema/security"    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"    xsi:schemaLocation="http://www.springframework.org/schema/beans              http://www.springframework.org/schema/beans/spring-beans-3.0.xsd              http://www.springframework.org/schema/security              http://www.springframework.org/schema/security/spring-security-3.1.xsd">    <!-- 不过滤登录页面 -->    <security:http pattern="/login.htm" security="none" />    <security:http pattern="/login.jsp" security="none" />    <!-- 配置SpringSecurity的http安全服务 -->    <security:http auto-config="true">        <!-- 只有ROLE_ADMIN权限用户才能访问/admin/**页面 -->        <security:intercept-url pattern="/admin/**"            access="ROLE_ADMIN" />        <!-- 只有ROLE_ADMIN或ROLE_USER权限用户才能访问所有页面 -->        <security:intercept-url pattern="/**"            access="ROLE_ADMIN,ROLE_USER" />    </security:http>    <!-- 认证管理器,配置SpringSecutiry的权限信息 -->    <security:authentication-manager>        <security:authentication-provider>            <!-- 帐户信息,指定用户名、密码和权限 -->            <security:user-service>                <security:user name="admin" password="admin"                    authorities="ROLE_ADMIN,ROLE_USER" />            </security:user-service>

</security:authentication-provider> </security:authentication-manager></beans>

4、环境测试

  发布项目,当出现如下界面,输入用户名admin和密码admin,若成功进入首页,则环境搭建成功。

技术分享

 

SpringSecurity 3.2入门(2)环境搭建