第一个Acegi程式

 

第一个Acegi程式

2008年05月09日 星期五 11:56

--------------------------------------------------------------------------------------------------------------------
第一个Acegi程式
http://www.acegisecurity.org/downloads.html
下载
--------------------------------------------------------------------------------------------------------------------
两个配置文件
四个JSP
--------------------------------------------------------------------------------------------------------------------
web.xml
--------------------------------------------------------------------------------------------------------------------
<?xml version="1.0" encoding="UTF-8"?>

<web-app xmlns="http://java.sun.com/xml/ns/j2ee"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
    version="2.4">

    <display-name>Acegi 范例</display-name>

    <!-- 指定Acegi资讯的设定档-->
    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>/WEB-INF/acegi-config.xml</param-value>
    </context-param>

    <!-- Acegi 的 Filter Chain 代理 -->
    <filter>
        <filter-name>Acegi Filter Chain Proxy</filter-name>
        <filter-class>
            org.acegisecurity.util.FilterToBeanProxy
        </filter-class>
        <init-param>
            <param-name>targetClass</param-name>
            <param-value>
                org.acegisecurity.util.FilterChainProxy
            </param-value>
        </init-param>
    </filter>

    <filter-mapping>
        <filter-name>Acegi Filter Chain Proxy</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

    <!-- 取得Spring的Context -->
    <listener>
        <listener-class>
            org.springframework.web.context.ContextLoaderListener
        </listener-class>
    </listener>
</web-app>
--------------------------------------------------------------------------------------------------------------------
acegi-config.xml
--------------------------------------------------------------------------------------------------------------------
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd">
<beans>
    <!-- 验证处理，使用表单 -->
    <bean
        >
        <!-- 验证管理员，处理验证资讯提供者 -->
        <property
            ref="authenticationManager" />
        <!-- 验证失败URL -->
        <property
            value="/acegilogin.jsp" />
        <!-- 验证成功预设URL -->
        <property
            value="/protected/loginsuccess.jsp" />
        <!-- 验证处理的提交位址 -->
        <property
            value="/j_acegi_security_check" />
    </bean>

    <!-- 验证管理员，管理验证资讯提供者 -->
    <bean
        >
        <property ><!-- 可有多个提供者,其中一个验证通过即可以了 -->
            <list>
                <ref local="daoAuthenticationProvider" />
            </list>
        </property>
    </bean>

    <!-- 验证提供者，指定使用记忆体来源中的验证资讯 -->
    <bean
        >
        <property ref="inMemoryDaoImpl" />
    </bean>

    <bean
        >
        <property >
            <value>
                caterpillar=123456,ROLE_SUPERVISOR
                user1=user1pwd,ROLE_USER
                user2=user2pwd,disabled,ROLE_USER
            </value>
        </property>
    </bean>

    <!-- 发生验证错误或权限错误时的处理 -->
    <bean
        >
        <property >
            <bean
                >
                <property value="/acegilogin.jsp" />
                <property value="false" />
            </bean>
        </property>
        <property >
            <bean
                >


                <!--       <property value="/protected/accessDenied.jsp"/> -->

                <!-- HTTP Status 403 - Access is denied -->
            </bean>
        </property>
    </bean>

    <!-- FilterSecurityInterceptor 对 URI 进行保护 -->
    <bean
        >
        <!-- 验证管理员 -->
        <property
            ref="authenticationManager" />
        <!-- 授权管理员 -->
        <property
            ref="accessDecisionManager" />
        <property >
            <value>
                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                PATTERN_TYPE_APACHE_ANT /protected/**=ROLE_SUPERVISOR
                <!-- /protected/**=ROLE_SUPERVISOR,ROLE_USER -->
            </value>
        </property>
    </bean>

    <!-- 授权管理员 -->
    <bean
        >
        <!-- 是否全部弃权时视为通过 -->
        <property value="false" />
        <property >
            <list>
                <bean />
            </list>
        </property>
    </bean>

    <bean
        />

    <!-- Filter Chain -->
    <bean
        >
        <property >
            <value>
                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                PATTERN_TYPE_APACHE_ANT
                /**=httpSessionContextIntegrationFilter,authenticationProcessingFilter,exceptionTranslationFilter,filterSecurityInterceptor
            </value>
        </property>
    </bean>
</beans>

--------------------------------------------------------------------------------------------------------------------
protected/accessDenied.jsp
--------------------------------------------------------------------------------------------------------------------
<%@page contentType="text/html"%>
<%@page pageEncoding="UTF-8"%>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
   "http://www.w3.org/TR/html4/loose.dtd">

<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <title>授权失败</title>
    </head>
    <body>

    <h1>授权失败</h1>
   
    </body>
</html>
--------------------------------------------------------------------------------------------------------------------
protected/loginsuccess.jsp
--------------------------------------------------------------------------------------------------------------------
<%@page contentType="text/html"%>
<%@page pageEncoding="UTF-8"%>
<%@ page import="org.acegisecurity.ui.webapp.AuthenticationProcessingFilter"%>


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
   "http://www.w3.org/TR/html4/loose.dtd">

<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <title>登入成功</title>
    </head>
    <body>
       
    <h1>欢迎 <%= session.getAttribute(AuthenticationProcessingFilter.ACEGI_SECURITY_LAST_USERNAME_KEY) %>
    </h1>
       
    </body>
</html>
--------------------------------------------------------------------------------------------------------------------
acegilogin.jsp
--------------------------------------------------------------------------------------------------------------------
<%@page contentType="text/html"%>
<%@page pageEncoding="UTF-8"%>
<html>
<head>
<title>Acegi 范例网页 - 登入</title>
</head>
<body>
<h2>登入范例应用程式！</h2>
<br />
<form action="j_acegi_security_check" method="POST">
<table>
    <tr>
        <td>名称：</td>
        <td><input type='text' value=''></td>
    </tr>
    <tr>
        <td>密码：</td>
        <td><input type='password' ></td>
    </tr>
    <tr>
        <td><input type="reset"></td>
        <td><input type="submit"></td>
    </tr>
</table>
</form>
</body>
</html>
--------------------------------------------------------------------------------------------------------------------
index.jsp
--------------------------------------------------------------------------------------------------------------------
<%@ page language="java" pageEncoding="UTF-8"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<META HTTP-EQUIV="Refresh" CONTENT="0;URL=acegilogin.jsp">
</head>
<body>
        <p>载入中...</p>
</body>
</html>
--------------------------------------------------------------------------------------------------------------------

本篇日志被作者设置为禁止发表新评论

©2008 Baidu

引文来源   第一个Acegi程式_熊熊之家