Today I saw a lot of people reprinted this article, here is a note, the original text from Csdn my blog.
Recently in the study of spring Security configuration, research for one weeks, in the official website looked at, only configured out a simple login, but do not know how to read from the database, from the Internet to find a few articles, everyone's configuration are the same, basically the same, Download the flowchart I posted when I sorted out the security execution, for your reference, I will later put my notes to the public to see, but I have uploaded my project on the Internet, you can download to see, is built with MAVEN, no need to find a jar bag. My Spring Security Project sample download address: http://download.csdn.net/detail/u011511684/7506455
The four important classes in spring security need to be implemented on their own:
1, userdetailsservice read login user information, permissions
2, Abstractsecurityinterceptor This class is used to inherit, but also to implement Servler filter, the role of filtering URL
3, Filterinvocationsecuritymetadatasource read URL resources
4, Accessdecisionmanager Control access rights
Description: The blue box is the class, the yellow box is the corresponding class method, the green is sends the URL request
Flowchart: