OpenJweb平台中acegi的配置

最新推荐文章于 2013-01-12 12:23:51 发布

baozhengw

最新推荐文章于 2013-01-12 12:23:51 发布

阅读量2.5k

点赞数

分类专栏： Java 文章标签： acegi 平台 bean class user login

本文链接：https://blog.csdn.net/baozhengw/article/details/2256010

版权

Java 专栏收录该内容

176 篇文章 1 订阅

订阅专栏

说明:

URL的授权写到了数据库里了,所以更改URL授权的时候不需要更改配置文件

<?xml version="1.0" encoding="GB2312"?>
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-2.0.xsd">

<bean id="concurrentSessionFilter"
  class="org.acegisecurity.concurrent.ConcurrentSessionFilter">
  <property name="sessionRegistry" ref="sessionRegistry"></property>
  <property name="expiredUrl">
   <value>/timeout.jsp</value>
  </property>
</bean>
<bean id="sessionRegistry"
  class="org.acegisecurity.concurrent.SessionRegistryImpl" />
<bean id="concurrentSessionController"
  class="org.acegisecurity.concurrent.ConcurrentSessionControllerImpl">
  <property name="maximumSessions" value="10"></property>
  <property name="sessionRegistry" ref="sessionRegistry"></property>
  <property name="exceptionIfMaximumExceeded" value="true"></property>
</bean>

<bean id="dataSource"
  class="org.springframework.jndi.JndiObjectFactoryBean">
  <property name="jndiName">
   
   <value>java:comp/env/jdbc/mysql</value>
   
   
  </property>
</bean>

<bean id="filterChainProxy"
  class="org.acegisecurity.util.FilterChainProxy">
  <property name="filterInvocationDefinitionSource">
   <value>
    CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
    PATTERN_TYPE_APACHE_ANT
    /**=httpSessionContextIntegrationFilter,logoutFilter,concurrentSessionFilter,authenticationProcessingFilter,securityContextHolderAwareRequestFilter,anonymousProcessingFilter,exceptionTranslationFilter,filterInvocationInterceptor
   </value>
  </property>
</bean>

<bean id="httpSessionContextIntegrationFilter"
  class="org.acegisecurity.context.HttpSessionContextIntegrationFilter" />

<bean id="rdbmsFilterInvocationDefinitionSource"
     class="org.apache.easframework.security.RdbmsFilterInvocationDefinitionSource">
     <property name="dataSource" ref="dataSource" />
                <property name="webresdbCache" ref="userCacheBackend" />
     
        </bean>

<bean id="anonymousProcessingFilter"
  class="org.acegisecurity.providers.anonymous.AnonymousProcessingFilter">
  <property name="key">
   <value>foobar</value>
  </property>
  <property name="userAttribute">
   <value>anonymousUser,AUTH_ANONYMOUS</value>
  </property>
</bean>

<bean id="jdbcDaoImpl"
  class="org.acegisecurity.userdetails.jdbc.JdbcDaoImpl">
  <property name="dataSource">
   <ref bean="dataSource" />
  </property>
  <property name="usersByUsernameQuery">
   <value>
    SELECT user_id, user_password,1 FROM eas_login_user
    WHERE user_id=?
   </value>
   
  </property>
  <property name="authoritiesByUsernameQuery">
   <value> select distinct a.user_id,b.auth_code from eas_login_user a ,eas_auth b,eas_roleauth_rel c ,eas_roleorg_rel d
where a.user_id=? and b.obj_id=c.auth_id and c.role_id = d.role_id and a.is_enabled=1 and   d.org_id=a.obj_id and d.org_id in
( select org_id from eas_org_node where tree_code in
(select eas_org_node.tree_code from eas_org_node,eas_login_user where eas_login_user.user_id=a.user_id and eas_login_user.obj_id=eas_org_node.obj_id))
   </value>
  </property>
</bean>

<bean id="anonymousAuthenticationProvider"
  class="org.acegisecurity.providers.anonymous.AnonymousAuthenticationProvider">
  <property name="key">
   <value>foobar</value>
  </property>
</bean>

<bean id="userCacheBackend"
  class="org.springframework.cache.ehcache.EhCacheFactoryBean">
  <property name="cacheManager">
   <ref local="cacheManager" />
  </property>
  <property name="cacheName">
   <value>userCache</value>
  </property>
</bean>

<bean id="cacheManager"
  class="org.springframework.cache.ehcache.EhCacheManagerFactoryBean">
  <property name="configLocation">
   <value>classpath:ehcache.xml</value>
   
  </property>
</bean>

<bean id="methodCache"
  class="org.springframework.cache.ehcache.EhCacheFactoryBean">
  <property name="cacheManager">
   <ref local="cacheManager" />
  </property>
  <property name="cacheName">
   <value>szairCache</value>
  </property>
</bean>

<bean id="businessAccessDecisionManager"
  class="org.acegisecurity.vote.AffirmativeBased">
  <property name="allowIfAllAbstainDecisions">
   <value>false</value>
  </property>
  <property name="decisionVoters">
   <list>
    <ref bean="roleVoter" />
   </list>
  </property>
</bean>

<bean id="contactManagerSecurity"
  class="org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
  <property name="authenticationManager">
   <ref bean="authenticationManager" />
  </property>
  <property name="accessDecisionManager">
   <ref bean="businessAccessDecisionManager" />
  </property>
  <property name="objectDefinitionSource">
   <value>
    select auth.auth_code,auth.auth_resource from eas_auth
    auth where auth.auth_type='METHOD' and auth.auth_code
    like 'AUTH_METHOD_%'
   </value>
  </property>
</bean>