spring security2學習筆記一(最小配置)

一、建立web project：

      所需jar包：

     

二、配置過濾器：

     <filter>       
       <filter-name>springSecurityFilterChain</filter-name>       
       <filter-class> org.springframework.web.filter.DelegatingFilterProxy </filter-class>   
     </filter>   
     <filter-mapping>       
       <filter-name>springSecurityFilterChain</filter-name>       
       <url-pattern>/*</url-pattern>   
     </filter-mapping>

 

三、applicationContext.xml基礎配置：

      <?xml version="1.0" encoding="UTF-8"?>

      <！——①命名空間配置——>
      <beans:beans xmlns="http://www.springframework.org/schema/security"
      xmlns:beans="http://www.springframework.org/schema/beans"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://www.springframework.org/schema/beans
      http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
      http://www.springframework.org/schema/security
      http://www.springframework.org/schema/security/spring-security-2.0.4.xsd">

      <！——②http部分配置如何攔截使用者請求。auto-config='true'將自動設定幾種常用的許可權控制機制——>

    <http auto-config='true'>

      <！——③intercept-url來判斷使用者需要具有何種許可權才能訪問對應的url資源——>
        <intercept-url pattern="/admin.jsp" access="ROLE_ADMIN" />
        <intercept-url pattern="/**" access="ROLE_USER" />
    </http>

      <！——④authorities，定義了這個使用者登陸之後將會擁有的許可權，它與上面intercept-url中定義的許可權內容一一對——>

    <authentication-provider>
        <user-service>
            <user name="admin" password="admin" authorities="ROLE_USER, ROLE_ADMIN" />
            <user name="user" password="user" authorities="ROLE_USER" />
        </user-service>
    </authentication-provider>

</beans:beans>

 

四、web.xml配置：

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
        http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">

 <filter>
  <filter-name>springSecurityFilterChain</filter-name>
  <filter-class>
   org.springframework.web.filter.DelegatingFilterProxy
  </filter-class>
 </filter>
 <filter-mapping>
  <filter-name>springSecurityFilterChain</filter-name>
  <url-pattern>/*</url-pattern>
 </filter-mapping>
 <context-param>
  <param-name>contextConfigLocation</param-name>
  <param-value>/WEB-INF/applicationContext.xml</param-value>
 </context-param>
 <listener>
  <listener-class>
   org.springframework.web.context.ContextLoaderListener
  </listener-class>
 </listener>

</web-app>