spring security 3 简单例子

ゞ浴缸里的玫瑰 2022-08-23 14:45 154阅读 0赞

web.xml内容

<?xml version="1.0" encoding="UTF-8"?>
    <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    	xmlns="http://java.sun.com/xml/ns/javaee"
    	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
    	id="WebApp_ID" version="3.0">
    
    	<display-name>spring3</display-name>
    
    	<context-param>
    		<param-name>contextConfigLocation</param-name>
    		<param-value>classpath:applicationContext-*.xml</param-value>
    	</context-param>
    
    	<listener>
    		<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    	</listener>
    
    	<filter>
    		<filter-name>springSecurityFilterChain</filter-name>
    		<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    	</filter>
    
    	<filter-mapping>
    		<filter-name>springSecurityFilterChain</filter-name>
    		<url-pattern>/jd/*</url-pattern>
    	</filter-mapping>
     	
    	<servlet>
    		<servlet-name>market</servlet-name>
    		<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
    		<load-on-startup>1</load-on-startup>
    	</servlet>
    
    	<servlet-mapping>
    		<servlet-name>market</servlet-name>
    		<url-pattern>/jd/*</url-pattern>
    	</servlet-mapping>
    </web-app>

/WEB-INF/market-servlet.xml 内容为：

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans"
    	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p"
    	xmlns:context="http://www.springframework.org/schema/context"
    	xmlns:mvc="http://www.springframework.org/schema/mvc"
    	xsi:schemaLocation="
            http://www.springframework.org/schema/beans
            http://www.springframework.org/schema/beans/spring-beans.xsd
            http://www.springframework.org/schema/mvc
            http://www.springframework.org/schema/mvc/spring-mvc.xsd
            http://www.springframework.org/schema/context
            http://www.springframework.org/schema/context/spring-context.xsd">
    
    	<context:annotation-config />
    
    	<context:component-scan base-package="cn.cloud.controller"></context:component-scan>
    
    	<bean id="viewResolver" class="org.springframework.web.servlet.view.InternalResourceViewResolver">
    		<property name="prefix" value="/page" />
    		<property name="suffix" value="" />
    	</bean>
    
    </beans>

src/applicationContext-security.xml  内容：

<?xml version="1.0" encoding="UTF-8"?>
    <b:beans xmlns="http://www.springframework.org/schema/security"
    	xmlns:b="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    	xsi:schemaLocation="http://www.springframework.org/schema/beans 
    						http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
                            http://www.springframework.org/schema/security 
                            http://www.springframework.org/schema/security/spring-security-3.1.xsd">
    
    	<http pattern="/jd/auth/*" security="none"></http>
    
    	<http access-denied-page="/jd/auth/denied" > 
    	
    		<intercept-url pattern="/jd/admin/*" access="ROLE_ADMIN" />
    		<intercept-url pattern="/jd/hr/*" access="ROLE_HR" />
    		<intercept-url pattern="/jd/bbs/*" access="ROLE_USER" />
    		<intercept-url pattern="/jd/blog/*" access="ROLE_USER" />
    		<intercept-url pattern="/jd/blog/*" access="ROLE_USER" />
    
    		<form-login login-page="/jd/auth/login" 
    					default-target-url="/jd/bbs/show" 
    					login-processing-url="/jd/j_spring_security_check"
    					authentication-failure-url="/jd/auth/login?msg=error"/>
    		
    	</http>
    
    	<authentication-manager>
    		<authentication-provider>
    			<user-service>
    				<user name="admin" password="admin" authorities="ROLE_USER, ROLE_HR, ROLE_ADMIN" />
    				<user name="hr" password="hr" authorities="ROLE_HR, ROLE_USER" />
    				<user name="user" password="user" authorities="ROLE_USER" />
    			</user-service>
    		</authentication-provider>
    	</authentication-manager>
    
    </b:beans>

cn.cloud.controller.DemoController 内容为：

package cn.cloud.controller;
    
    import javax.servlet.http.HttpServletRequest;
    import org.springframework.stereotype.Controller;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.ResponseBody;
    
    @Controller
    public class DemoController 
    {
    	@RequestMapping(value="/auth/login")
    	public String login(HttpServletRequest request)
    	{
    		return "/auth/login.jsp";
    	}
    	
    	@RequestMapping(value="/auth/logout", produces="text/html;charset=UTF-8")
    	@ResponseBody()
    	public String logout()
    	{
    		return "<h1>this is auth.logout</h1>";
    	}
    	
    	@RequestMapping(value="/auth/denied", produces="text/html;charset=UTF-8")
    	@ResponseBody()
    	public String denied()
    	{
    		return "<h1 style='color:red;'>no right</h1>";
    	}
    	
    	@RequestMapping("/admin/list")
    	@ResponseBody()
    	public String index(HttpServletRequest request)
    	{
    		request.getSession().setAttribute("user", "admin");
    		return "<h1>this is admin.list</h1>";
    	}
    	
    	@RequestMapping("/admin/access")
    	@ResponseBody()
    	public String access(HttpServletRequest request)
    	{
    		String user = (String)request.getSession().getAttribute("user");
    		return "<h1>this is admin.acccess<br />login user is "+user+"</h1>";
    	}
    	
    	@RequestMapping("/hr/job")
    	@ResponseBody()
    	public String job()
    	{
    		return "<h1>this is hr.job</h1>";
    	}
    	
    	@RequestMapping("/hr/employ")
    	@ResponseBody()
    	public String employ()
    	{
    		return "<h1>this is hr.employ</h1>";
    	}
    	
    	@RequestMapping(value="/bbs/show", produces="text/html;charset=UTF-8")
    	@ResponseBody()
    	public String bbs(HttpServletRequest request)
    	{
    		return "<h1>this is bbs.show</h1>";
    	}
    	
    	@RequestMapping(value="/blog/show", produces="text/html;charset=UTF-8")
    	@ResponseBody()
    	public String blog()
    	{
    		return "<h1>this is list.blog</h1>";
    	}
    }

/page/auth/login.jsp内容为：

<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>  
<!DOCTYPE html>  
<html>  
<head>  
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />  
<title>login page</title>  
</head>  
<body>  
<h1>$\{ msg.error\}</h1>  
<form action="$\{ pageContext.request.contextPath\}/jd/j\_spring\_security\_check" method="post">  
username:<input type="text" name="j\_username" /><br />  
password:<input type="text" name="j\_password" /><br />  
<input type="submit" value="submit" /><br />  
</form>  
  
  
</body>  
</html>