spring security学习（一）

web.xml配置：

<?xml version="1.0" encoding="UTF-8" ?>
<web-app id="WebApp_ID" version="2.4"  
    xmlns="http://java.sun.com/xml/ns/j2ee"   
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"  
    xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee   
    http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">  
    <!-- SpringSecurity必须的filter -->  
  <filter>  
        <filter-name>springSecurityFilterChain</filter-name>  
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>  
    </filter>  

    <filter-mapping>  
        <filter-name>springSecurityFilterChain</filter-name>  
        <url-pattern>/*</url-pattern>  
    </filter-mapping>  

    <context-param>  
        <param-name>contextConfigLocation</param-name>  
        <param-value>  
        classpath:spring-security.xml  
        </param-value>  
    </context-param>  

    <servlet>  
        <servlet-name>spring</servlet-name>  
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>  
        <load-on-startup>1</load-on-startup>  
    </servlet>  

    <servlet-mapping>  
        <servlet-name>spring</servlet-name>  
        <url-pattern>/**</url-pattern>  
    </servlet-mapping>  

    <listener>  
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>  
    </listener> 
</web-app>

spring-security.xml配置：

<?xml version="1.0" encoding="UTF-8"?>  
<beans:beans xmlns="http://www.springframework.org/schema/security"
  xmlns:beans="http://www.springframework.org/schema/beans"
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://www.springframework.org/schema/beans
           http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
           http://www.springframework.org/schema/security
           http://www.springframework.org/schema/security/spring-security.xsd">  
           <!-- 使用默认登录页面，spring提供！ -->
  <http>
  <intercept-url pattern="/**" access="ROLE_USER" />
  <form-login />
  <logout />
</http> 


         <authentication-manager>
  <authentication-provider>
    <user-service>
      <user name="zw" password="123" authorities="ROLE_USER, ROLE_ADMIN" />
      <user name="sam" password="123" authorities="ROLE_USER" />
    </user-service>
  </authentication-provider>
</authentication-manager> 
</beans:beans>  

另外在WEB-INF底下，提供一个spring-servlet.xml的配置文件

所需jar包：见截图

访问index.jsp，被spring拦截，跳转到登录界面（spring提供的）见截图

输入正确（xml文件里面配置的）的用户名密码，跳转成功

输入错误，则显示提示

第二章将写使用自定义的登录界面进行学习测试，欢迎留言讨论！