基于Maven的spring_security入门

配置文件的修改点没什么变化，可以参考

pom.xml的依赖参考：

<dependencies>          <!-- Commons -->         <dependency>             <groupId>commons-dbcp</groupId>             <artifactId>commons-dbcp</artifactId>             <version>1.4</version>         </dependency>          <!-- Log -->         <dependency>             <groupId>log4j</groupId>             <artifactId>log4j</artifactId>             <version>1.2.17</version>         </dependency>          <!-- Struts2 -->         <dependency>             <groupId>org.freemarker</groupId>             <artifactId>freemarker</artifactId>             <version>2.3.18</version>         </dependency>         <dependency>             <groupId>org.apache.struts</groupId>             <artifactId>struts2-core</artifactId>             <version>2.3.16.3</version>         </dependency>         <dependency>             <groupId>org.apache.struts</groupId>             <artifactId>struts2-spring-plugin</artifactId>             <version>2.3.16.3</version>         </dependency>          <!-- Spring -->         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-core</artifactId>             <version>3.2.8.RELEASE</version>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-web</artifactId>             <version>3.2.8.RELEASE</version>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-beans</artifactId>             <version>3.2.8.RELEASE</version>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-context</artifactId>             <version>3.2.8.RELEASE</version>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-context-support</artifactId>             <version>3.2.8.RELEASE</version>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-expression</artifactId>             <version>3.2.8.RELEASE</version>         </dependency>         <dependency>             <groupId>org.springframework</groupId>             <artifactId>spring-jdbc</artifactId>             <version>3.2.8.RELEASE</version>         </dependency>         <dependency>             <groupId>org.springframework.security</groupId>             <artifactId>spring-security-core</artifactId>             <version>3.2.4.RELEASE</version>         </dependency>         <dependency>             <groupId>org.springframework.security</groupId>             <artifactId>spring-security-web</artifactId>             <version>3.2.4.RELEASE</version>         </dependency>         <dependency>             <groupId>org.springframework.security</groupId>             <artifactId>spring-security-config</artifactId>             <version>3.2.4.RELEASE</version>         </dependency>          <!-- Mybatis -->         <dependency>             <groupId>org.mybatis</groupId>             <artifactId>mybatis</artifactId>             <version>3.0.6</version>         </dependency>         <dependency>             <groupId>org.mybatis</groupId>             <artifactId>mybatis-spring</artifactId>             <version>1.0.2</version>         </dependency>          <!-- Database -->         <dependency>             <groupId>mysql</groupId>             <artifactId>mysql-connector-java</artifactId>             <version>5.1.31</version>         </dependency>     </dependencies>

接下去就是spring-security的实现了

1. 修改web.xml

加入spring-security的过滤器，切忌必须加在struts2的过滤器前面。

<?xml version="1.0" encoding="UTF-8"?> <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"     xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"     id="WebApp_ID" version="2.5">     <display-name>SpringSecurityPrj</display-name>     <context-param>         <param-name>contextConfigLocation</param-name>         <param-value>         classpath:applicationContext*.xml     </param-value>     </context-param>     <filter>         <filter-name>springSecurityFilterChain</filter-name>         <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>     </filter>     <filter-mapping>         <filter-name>springSecurityFilterChain</filter-name>         <url-pattern>/*</url-pattern>     </filter-mapping>     <listener>         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>     </listener>     <welcome-file-list>         <welcome-file>index.jsp</welcome-file>     </welcome-file-list> </web-app>

接下来编写的是applicationContext-security.xml文件：

<?xml version="1.0" encoding="UTF-8"?> <beans:beans xmlns="http://www.springframework.org/schema/security"     xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"     xsi:schemaLocation="http://www.springframework.org/schema/beans          http://www.springframework.org/schema/beans/spring-beans-3.0.xsd         http://www.springframework.org/schema/security         http://www.springframework.org/schema/security/spring-security-3.2.xsd">     <!-- 自动配置模式，拦截所有请求，有ROLE_USER才可以通过 -->     <http auto-config="true">         <intercept-url pattern="/**" access="ROLE_USER" />     </http>     <!-- 认证管理器。用户名密码都集成在配置文件中 -->     <authentication-manager>         <authentication-provider>             <user-service>                 <user name="sharp" password="sharp" authorities="ROLE_USER" />             </user-service>         </authentication-provider>     </authentication-manager> </beans:beans>

另外我新建了一个index.jsp文件，作用是登录成功后返回到index.jsp页面：

<%@ page language="java" contentType="text/html; charset=UTF-8"     pageEncoding="UTF-8"%> <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>登录首页</title> </head> <body>     <span color="red">登录成功!</span> </body> </html>

当我们在浏览器地址栏里输入下面的url：

http://localhost:8080/SpringSecurityPrj/

我们就可以再浏览器里看到用户登录界面：

呵呵，内置的登录页面，挺好玩的。没有使用过springsecurity可能还没发现我在那里配置用户名和密码吧，看下面一段代码，这里就是用户名和密码：

​​<user name=​​​​"sharp"​​​​password=​​​​"sharp"​​​​authorities=​​​​"ROLE_USER"​​​​/>​​

测试一：

我们录入用户名：admin；密码：admin，然后点击提交查询，最终页面如下：

登录失败了哦！

测试二：我们录入用户名：sharp；密码：sharp；如下图：

点击提交查询后，页面如下：

页面跳转到index.jsp页面，登录成功了。

怀有希望!!