利用spring-security实现登录

╰+攻爆jí腚メ 2022-04-13 03:58 228阅读 0赞

首先创建maven工程（war）  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3Nzk2MDE3_size_16_color_FFFFFF_t_70]

#### pom.xml ####

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
      <modelVersion>4.0.0</modelVersion>
      <groupId>cn.itcast.demo</groupId>
      <artifactId>spring-security-demo</artifactId>
      <version>0.0.1-SNAPSHOT</version>
      <packaging>war</packaging>
      <properties>
    		<spring.version>4.2.4.RELEASE</spring.version>
    	</properties>
    
    	<dependencies>
    
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-core</artifactId>
    			<version>${spring.version}</version>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-web</artifactId>
    			<version>${spring.version}</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-webmvc</artifactId>
    			<version>${spring.version}</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-context-support</artifactId>
    			<version>${spring.version}</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-test</artifactId>
    			<version>${spring.version}</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-jdbc</artifactId>
    			<version>${spring.version}</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.security</groupId>
    			<artifactId>spring-security-web</artifactId>
    			<version>4.1.0.RELEASE</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.security</groupId>
    			<artifactId>spring-security-config</artifactId>
    			<version>4.1.0.RELEASE</version>
    		</dependency>
    
    		<dependency>
    			<groupId>javax.servlet</groupId>
    			<artifactId>servlet-api</artifactId>
    			<version>2.5</version>
    			<scope>provided</scope>
    		</dependency>
    
    
    	</dependencies>
    	<build>
    	  <plugins>		
    	      
    		  <plugin>
    				<groupId>org.apache.maven.plugins</groupId>
    				<artifactId>maven-compiler-plugin</artifactId>
    				<version>3.2</version>
    				<configuration>
    					<source>1.8</source>
    					<target>1.8</target>
    					<encoding>UTF-8</encoding>
    				</configuration>
    		  </plugin>      
    	      <plugin>
    				<groupId>org.apache.tomcat.maven</groupId>
    				<artifactId>tomcat7-maven-plugin</artifactId>
    				<configuration>
    					
    					<port>9090</port>
    					
    					<path>/</path>
    				</configuration>
    	  	  </plugin>
    	   </plugins>  
        </build>
    </project>

#### web.xml ####

<?xml version="1.0" encoding="UTF-8"?>
    <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" version="2.5">	
    
      	 <context-param>
    		<param-name>contextConfigLocation</param-name>
    		<param-value>classpath:spring-security.xml</param-value>
    	 </context-param>
    	 <listener>
    		<listener-class>
    			org.springframework.web.context.ContextLoaderListener
    		</listener-class>
    	 </listener>
    	
    	 <filter>  
    		<filter-name>springSecurityFilterChain</filter-name>  
    		<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>  
    	 </filter>  
    	 <filter-mapping>  
    		<filter-name>springSecurityFilterChain</filter-name>  
    		<url-pattern>/*</url-pattern>  
    	 </filter-mapping>
    	
    </web-app>

#### spring-security.xml ####

<?xml version="1.0" encoding="UTF-8"?>
    <beans:beans xmlns="http://www.springframework.org/schema/security" xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd">
    	
    	<http pattern="/login.html" security="none"></http>
    	<http pattern="/error.html" security="none"></http>
    	
    	<http use-expressions="false">
    		<intercept-url pattern="/**" access="ROLE_USER" />
    		<form-login login-page="/login.html" default-target-url="/index.html" authentication-failure-url="/error.html" />
    		
    	<csrf disabled="true"/>
    	</http>
    
    	
    	<authentication-manager>
    		<authentication-provider>
    			<user-service>
    				<user name="admin" password="123456" authorities="ROLE_USER" />
    			</user-service>
    		</authentication-provider>
    	</authentication-manager>
    
    </beans:beans>

#### login.html ####

<!DOCTYPE html>
    <html>
    <head>
    <meta charset="UTF-8">
    <title>登陆</title>
    </head>
    <body>
    	<h1>--欢迎欢迎！--</h1>
    	<form action="/login" method="post">
    		用户名：<input type="text" name="username" /><br> 密码：<input type="password" name="password" /><br>
    		<button>登陆</button>
    	</form>
    </body>
    </html>

#### index.html ####

<!DOCTYPE html>
    <html>
    <head>
    <meta charset="UTF-8">
    <title>首页</title>
    </head>
    <body>
    欢迎进入神奇的Spring Security世界！
    </body>
    </html>

#### error.html ####

<!DOCTYPE html>
    <html>
    <head>
    <meta charset="UTF-8">
    <title>首页</title>
    </head>
    <body>
    用户名或密码错误！
    </body>
    </html>

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3Nzk2MDE3_size_16_color_FFFFFF_t_70]: /images/20220413/acecb66caa684a37827102d45ea31ff3.png