spring-security.安全框架配置的两种方式 spring-security.xml

0.pom.xml加入配置

<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-web</artifactId>

<version>3.2.3.RELEASE</version>
</dependency>

       <dependency>
           <groupId>org.springframework.security</groupId>
           <artifactId>spring-security-config</artifactId>

<version>3.2.3.RELEASE</version>
</dependency>

1.第一种方式：

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
   xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
                       http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd">

2.第二种方式：

1.1 spring-security.xml 文件内容

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
   xmlns:beans="http://www.springframework.org/schema/beans"
   xmlns:dubbo="http://code.alibabatech.com/schema/dubbo" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
   http://code.alibabatech.com/schema/dubbo http://code.alibabatech.com/schema/dubbo/dubbo.xsd
                       http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd">

<http pattern="/*.html" security="none"></http>
   <http pattern="/css/**" security="none"></http>
   <http pattern="/angularjs/**" security="none"></http>
   <http pattern="/img/**" security="none"></http>
   <http pattern="/js/**" security="none"></http>
   <http pattern="/plugins/**" security="none"></http>
   <http pattern="/seller/add.do" security="none"></http>
   
   <http use-expressions="false">
   

   <intercept-url pattern="/**" access="ROLE_SELLER"/>
   <form-login login-page="/shoplogin.html" default-target-url="/admin/index.html" authentication-failure-url="/shoplogin.html" always-use-default-target="true" />
   
   <csrf disabled="true"/>
   <logout/>
   
   <headers>
   <frame-options policy="SAMEORIGIN"/>
   </headers>
   </http>
   
   <authentication-manager>
   <authentication-provider user-service-ref="userDetailService">
   
   <password-encoder ref="bcriptencoder"></password-encoder>
   </authentication-provider>

   </authentication-manager>
   
   <beans:bean id="userDetailService" class="com.pinyougou.service.UserDetailServiceImpl">
   <beans:property name="sellerService" ref="sellerService"></beans:property>
   </beans:bean>

   
   <dubbo:application name="pinyougou-shop-web" />
   <dubbo:registry address="zookeeper://192.168.199.130:2181"/>
   <dubbo:reference id="sellerService" interface="com.pinyougou.sellergoods.service.SellerService"></dubbo:reference>
   
   <beans:bean id="bcriptencoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder"></beans:bean>
</beans:beans>

1.2 UserDetailServiceImpl.java 实现文件内容作数据库查询用户使用

import java.util.ArrayList;
import java.util.List;

import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;

import com.pinyougou.pojo.TbSeller;
import com.pinyougou.sellergoods.service.SellerService;

/**
* @author 作者 E-mail: hanzl
* @version 创建时间：2018年7月17日下午9:12:50
* 类说明：
*/
public class UserDetailServiceImpl implements UserDetailsService {

   private SellerService sellerService;

   public void setSellerService(SellerService sellerService) {
   this.sellerService = sellerService;
}

   public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
       System.out.println("经过了UserDetailServiceImpl");

       List<GrantedAuthority> list=new ArrayList<>() ;
       list.add(new SimpleGrantedAuthority("ROLE_SELLER"));
       TbSeller seller=sellerService.findOne(username);
       if(seller!=null){
           if(seller.getStatus().equals("1")) return new User(username,seller.getPassword(),list);
           return null;
       }
       return null;
   }

}
3.web.xml 加入如下配置

<context-param>
       <param-name>contextConfigLocation</param-name>
       <param-value>classpath:spring/spring-security.xml</param-value>
   </context-param>
   <listener>
       <listener-class>
           org.springframework.web.context.ContextLoaderListener
       </listener-class>
   </listener>

   <filter>
       <filter-name>springSecurityFilterChain</filter-name>
       <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
   </filter>
   <filter-mapping>
       <filter-name>springSecurityFilterChain</filter-name>
       <url-pattern>/*</url-pattern>
   </filter-mapping>