<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Claroja]]></title><description><![CDATA[]]></description><link>https://blog.csdn.net/claroja</link><language>zh-cn</language><generator>https://blog.csdn.net/</generator><copyright><![CDATA[Copyright &copy; claroja]]></copyright><item><title><![CDATA[树模型]]></title><link>https://blog.csdn.net/claroja/article/details/116199419</link><guid>https://blog.csdn.net/claroja/article/details/116199419</guid><author>claroja</author><pubDate>Tue, 27 Apr 2021 14:02:18 +0800</pubDate><description><![CDATA[决策树-剪枝方法
决策树
Ensemble Learning
booststraping
Bagging
Boosting
Boosting AdaBoost
Boosting GDBT
Boosting Xgboost
参考文献:

]]></description><category></category></item><item><title><![CDATA[SpringSecurity 流程图]]></title><link>https://blog.csdn.net/claroja/article/details/115219791</link><guid>https://blog.csdn.net/claroja/article/details/115219791</guid><author>claroja</author><pubDate>Thu, 25 Mar 2021 23:28:55 +0800</pubDate><description><![CDATA[]]></description><category></category></item><item><title><![CDATA[SpringSecurity 跨域问题 Cors]]></title><link>https://blog.csdn.net/claroja/article/details/115104612</link><guid>https://blog.csdn.net/claroja/article/details/115104612</guid><author>claroja</author><pubDate>Thu, 25 Mar 2021 23:28:24 +0800</pubDate><description><![CDATA[在SpringBoot中只需要在Controller上添加@CrossOrigin,而在导入SpringSecurity后将会失效,所以需要我们在SpringSecurity中再进行配置
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.c]]></description><category></category></item><item><title><![CDATA[SpringSecurity Basic Authentication]]></title><link>https://blog.csdn.net/claroja/article/details/115103769</link><guid>https://blog.csdn.net/claroja/article/details/115103769</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:38:18 +0800</pubDate><description><![CDATA[当使用非浏览器处理Basic HTTP Authentication认证时,需post请求携带auth参数即可
Basic HTTP Authentication认证过程

1.用户访问未授权的private
2.FilterSecurityInterceptor抛出AccessDeniedException
3.ExceptionTranslationFilter开始作用,调用BasicAuthenticationEntryPoint发送WWW-Authenticate header.当客户端收到WWW-]]></description><category></category></item><item><title><![CDATA[SpringSecurity Form Login]]></title><link>https://blog.csdn.net/claroja/article/details/115103412</link><guid>https://blog.csdn.net/claroja/article/details/115103412</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:37:57 +0800</pubDate><description><![CDATA[登录过程

1)首先,访问没有授权的/private
2)FilterSecurityInterceptor拒绝访问,并抛出AccessDeniedException
3)ExceptionTranslationFilter根据AuthenticationEntryPoint重定向到/login
4)浏览器根据重定向,访问login
5)渲染登录界面
当用户在登录界面输入用户名和密码后,进入到了AbstractAuthenticationProcessingFilter流程,这里是具体的实现类Usernam]]></description><category></category></item><item><title><![CDATA[SpringSecurity AbstractAuthenticationProcessingFilter]]></title><link>https://blog.csdn.net/claroja/article/details/115102903</link><guid>https://blog.csdn.net/claroja/article/details/115102903</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:37:28 +0800</pubDate><description><![CDATA[1.AbstractAuthenticationProcessingFilter从HttpServletRequest中创建Authentication
Authentication的类型根据AbstractAuthenticationProcessingFilter的子类决定,比如:
1)UsernamePasswordAuthenticationFilter 创建一个UsernamePasswordAuthenticationToken
所以如果遇到不能认证的Token就会抛出异常
2.Authent.]]></description><category></category></item><item><title><![CDATA[SpringSecurity AuthenticationManager&ProviderManager]]></title><link>https://blog.csdn.net/claroja/article/details/115102667</link><guid>https://blog.csdn.net/claroja/article/details/115102667</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:37:00 +0800</pubDate><description><![CDATA[ProviderManager是AuthenticationManager的实现.
ProviderManager代理多个AuthenticationProvider(是Authentication的实现),每个AuthenticationProvider决定是认证成功,失败还是交由下游处理.如果遇到不能处理的类型则会报错.

每个AuthenticationProvider代表一个特别的认证方式,比如:
1)DaoAuthenticationProvider 支持 username/password ba]]></description><category></category></item><item><title><![CDATA[SpringSecurity Authentication]]></title><link>https://blog.csdn.net/claroja/article/details/115102483</link><guid>https://blog.csdn.net/claroja/article/details/115102483</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:36:33 +0800</pubDate><description><![CDATA[Authentication是用户认证的信息,会提供给AuthenticationManager,所以刚创建时要设置他的isAuthenticated()返回false
1)principal  对应 UserDetail
2)credentials 对应 password
3)authoritis 对应 GrantedAuthority
参考:
https://docs.spring.io/spring-security/site/docs/5.4.5/reference/html5/#servlet-a]]></description><category></category></item><item><title><![CDATA[SpringSecurity SecurityContextHolder&SecurityContext]]></title><link>https://blog.csdn.net/claroja/article/details/115102197</link><guid>https://blog.csdn.net/claroja/article/details/115102197</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:36:12 +0800</pubDate><description><![CDATA[SecurityContextHolder用来存储一次访问的用户信息
SecurityContextHolder通过ThreadLocal来实现,所以是线程安全的
SecurityContextHolder包含了SecurityContext,而SecurityContext包含Autherntication.
SecurityContext context = SecurityContextHolder.createEmptyContext(); 
Authentication authenticati.]]></description><category></category></item><item><title><![CDATA[SpringSecurity Exceptions]]></title><link>https://blog.csdn.net/claroja/article/details/115101815</link><guid>https://blog.csdn.net/claroja/article/details/115101815</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:35:47 +0800</pubDate><description><![CDATA[ExceptionTranslationFilter可以将AccessDeniedException和AuthenticationException转换为HTTP responses.

参考:
https://docs.spring.io/spring-security/site/docs/5.4.5/reference/html5/#servlet-exceptiontranslationfilter

]]></description><category></category></item><item><title><![CDATA[SpringSecurity Filter顺序]]></title><link>https://blog.csdn.net/claroja/article/details/115101569</link><guid>https://blog.csdn.net/claroja/article/details/115101569</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:35:24 +0800</pubDate><description><![CDATA[Spring Security Filter的顺序:
ChannelProcessingFilter
WebAsyncManagerIntegrationFilter
SecurityContextPersistenceFilter
HeaderWriterFilter
CorsFilter
CsrfFilter
LogoutFilter
OAuth2AuthorizationRequestRedirectFilter
Saml2WebSsoAuthenticationRequestFilter
X509A]]></description><category></category></item><item><title><![CDATA[SpringSecurityFilterChain]]></title><link>https://blog.csdn.net/claroja/article/details/115101297</link><guid>https://blog.csdn.net/claroja/article/details/115101297</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:35:01 +0800</pubDate><description><![CDATA[Security Filter 在SecurityFilterChain中是Beans,通过FilterChainProxy代理来注册.

在普通的Servlet  container中,Fitler只能通过url来调用.而FilterChainProxy则可以通过RequestMatcher接口,来实现灵活调用.

参考:
https://docs.spring.io/spring-security/site/docs/5.4.5/reference/html5/#servlet-securityfilt]]></description><category></category></item><item><title><![CDATA[SpringSecurity Filter]]></title><link>https://blog.csdn.net/claroja/article/details/115100602</link><guid>https://blog.csdn.net/claroja/article/details/115100602</guid><author>claroja</author><pubDate>Mon, 22 Mar 2021 23:34:35 +0800</pubDate><description><![CDATA[Filter
Spring Security’s Servlet 基于 Servlet Filters.

客户端发送一个请求到application,容器(tomcat)创造了FilterChaain(包含Filter和Servlet)来处理请求(HttpServletRequest).在SpringMVC中servlet就是DispatcherServlet.
最多一个Servlet处理一个请求和相应.,而可以有多个filter来:
1)阻止访问下游(downstream)的fitler或servlet]]></description><category></category></item><item><title><![CDATA[Spring Security UserDetail]]></title><link>https://blog.csdn.net/claroja/article/details/114603725</link><guid>https://blog.csdn.net/claroja/article/details/114603725</guid><author>claroja</author><pubDate>Fri, 19 Mar 2021 21:39:02 +0800</pubDate><description><![CDATA[userdetail接口
public interface UserDetails extends Serializable {
    Collection&lt;? extends GrantedAuthority&gt; getAuthorities();//用户的权限集， 默认需要添加ROLE_ 前缀
    String getPassword();//用户的加密后的密码， 不加密会使用{noop}前缀
    String getUsername();//应用内唯一的用户名
    boolea]]></description><category></category></item><item><title><![CDATA[Spring Security 用户登录实战]]></title><link>https://blog.csdn.net/claroja/article/details/114605204</link><guid>https://blog.csdn.net/claroja/article/details/114605204</guid><author>claroja</author><pubDate>Fri, 19 Mar 2021 21:38:40 +0800</pubDate><description><![CDATA[参考:
https://www.cnblogs.com/dw3306/p/12751373.html

]]></description><category></category></item><item><title><![CDATA[Spring Security HttpSecurity.formLogin]]></title><link>https://blog.csdn.net/claroja/article/details/114605646</link><guid>https://blog.csdn.net/claroja/article/details/114605646</guid><author>claroja</author><pubDate>Fri, 19 Mar 2021 21:38:16 +0800</pubDate><description><![CDATA[http
            .formLogin()
//            .usernameParameter("username123")//自定义入参,需要和前端保持一致,默认是username
//            .passwordParameter("password123")//自定义入参,需要和前端保持一致,默认是password
            .loginPage("/login.html")
            .loginProcessi...]]></description><category></category></item><item><title><![CDATA[Spring Security WebSecurityConfigurerAdapter]]></title><link>https://blog.csdn.net/claroja/article/details/114605690</link><guid>https://blog.csdn.net/claroja/article/details/114605690</guid><author>claroja</author><pubDate>Fri, 19 Mar 2021 21:37:49 +0800</pubDate><description><![CDATA[该类是实现springsecurity配置,必须要继承

]]></description><category></category></item><item><title><![CDATA[Spring Security HttpSecurity]]></title><link>https://blog.csdn.net/claroja/article/details/114605778</link><guid>https://blog.csdn.net/claroja/article/details/114605778</guid><author>claroja</author><pubDate>Fri, 19 Mar 2021 21:37:23 +0800</pubDate><description><![CDATA[HttpSecurity
1.formLogin
2.authorizeRequests

]]></description><category></category></item><item><title><![CDATA[Spring Security HttpSecurity.authorizeRequests]]></title><link>https://blog.csdn.net/claroja/article/details/114605946</link><guid>https://blog.csdn.net/claroja/article/details/114605946</guid><author>claroja</author><pubDate>Fri, 19 Mar 2021 21:36:56 +0800</pubDate><description><![CDATA[http.authorizeRequests()

                .antMatchers("/login.html").permitAll()//放行/login.html，不需要认证
                // .antMatchers("/css/**","/js/**","/images/**").permitAll()//放行静态资源
                // .antMatchers("/**/*.png").permitAll()//放行...]]></description><category></category></item><item><title><![CDATA[Spring Security login]]></title><link>https://blog.csdn.net/claroja/article/details/114650021</link><guid>https://blog.csdn.net/claroja/article/details/114650021</guid><author>claroja</author><pubDate>Fri, 19 Mar 2021 21:36:31 +0800</pubDate><description><![CDATA[参考文献:
https://www.websparrow.org/spring/spring-security-jdbc-authentication-with-spring-boot
https://grobmeier.solutions/spring-security-5-intro-form-login.html
https://www.codejava.net/frameworks/spring-boot/form-authentication-with-jdbc-and-mysql

...]]></description><category></category></item></channel></rss>