spring-security Secure Login

1 ) Modify the pom.xml , add dependencies

 <! - Authentication ->

<dependency>

<groupId>org.springframework.security</groupId>

<artifactId>spring-security-web</artifactId>

</dependency>

<dependency>

<groupId>org.springframework.security</groupId>

<artifactId>spring-security-config</artifactId>

</dependency>

( 2 ) Modify web.xml

<context-param>

<param-name>contextConfigLocation</param-name>

<param-value>classpath:spring/spring-security.xml</param-value>

 </context-param>

 <listener>

<listener-class>

org.springframework.web.context.ContextLoaderListener

</listener-class>

 </listener>

 <filter>  

<filter-name>springSecurityFilterChain</filter-name>   <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>  

 </filter>  

 <filter-mapping>  

<filter-name>springSecurityFilterChain</filter-name>  

<url-pattern>/*</url-pattern>  

 </filter-mapping>

 

( 3 ) the Spring add profile directory spring-security.xml

<! - The following pages will not be intercepted ->

<http pattern="/login.html" security="none"></http>

<http pattern="/css/**" security="none"></http>

<http pattern="/img/**" security="none"></http>

<http pattern="/js/**" security="none"></http>

<http pattern="/plugins/**" security="none"></http>

 

<! - page blocking rules ->

<http use-expressions="false">

<intercept-url pattern="/*" access="ROLE_ADMIN" />

<form-login login-page="/login.html"  default-target-url="/admin/index.html" authentication-failure-url="/login.html" always-use-default-target="true"/>

<csrf disabled="true"/>

<headers>

<frame-options policy="SAMEORIGIN"/>

</headers>

</http>

 

<! - Certification Manager ->

<authentication-manager>

<authentication-provider>

<user-service>

<user name="admin" password="123456" authorities="ROLE_ADMIN"/>

<user name="sunwukong" password="dasheng" authorities="ROLE_ADMIN"/>

</user-service>

</authentication-provider>

</authentication-manager>

 

2.2.2 login page

Modify XXXX-web of login.html

<form id="loginform" action="/login" method="post"  class="sui-form">

<div class="input-prepend"><span class="add-on loginname"></span>

<input id="prependedInput"  name="username" type="text" placeholder="邮箱/用户名/手机号" class="span2 input-xfat">

</div>

<div class="input-prepend"><span class="add-on loginpwd"></span>

<input id="prependedInput"  name="password" type="password" placeholder="请输入密码" class="span2 input-xfat">

</div>

<div class="setting">

<div id="slider">

<div id="slider_bg"></div>

<span ID = "label" >>> </ span> <span ID = "labelTip" > drag the slider verify </ span>

</div>

</div>

<div class="logined">

<a class="sui-btn btn-block btn-xlarge btn-danger" onclick="document:loginform.submit()" target="_blank">登  录</a>

</div>

</form>

2.3.1 back-end code

In youlexuan-manager-web New LoginController.java

package com.youlexuan.sellergoods.controller;

import java.util.HashMap;

import java.util.Map;

import org.springframework.security.core.context.SecurityContextHolder;

import org.springframework.security.core.userdetails.UserDetails;

import org.springframework.web.bind.annotation.RequestMapping;

import org.springframework.web.bind.annotation.RestController;

@RestController

@RequestMapping("/login")

public  class  LoginController {

@RequestMapping("name")

public Map name(){

String name=SecurityContextHolder.getContext()

.getAuthentication().getName();

Map map=new HashMap();

map.put("loginName", name);

return map ;

}

}

2.3.2 front-end code

(1) New loginService.js

// access to services layer

app.service('loginService',function($http){

// read the sign in the name of people

this.loginName=function(){

return $http.get('../login/name.do');

}

});

(2)新建indexController.js

app.controller('indexController' ,function($scope,$controller   ,loginService){

    //读取当前登录人  

$scope.showLoginName=function(){

loginService.loginName().success(

function(response){

$scope.loginName=response.loginName;

}

);

}    

});

index.html页面上引入JS

<script type="text/javascript" src="../plugins/angularjs/angular.min.js"></script>

<script type="text/javascript" src="../js/base.js"></script>

<script type="text/javascript" src="../js/service/loginService.js"></script>

<script type="text/javascript" src="../js/controller/indexController.js"></script>    

指令

<body class="hold-transition skin-green sidebar-mini"  ng-app="youlexuan" ng-controller="indexController" ng-init="showLoginName ()">

Guess you like

Origin www.cnblogs.com/wycBolg/p/11863206.html