强大全面的WEB基础框架Maven工程（SpringMVC 5.1.5、Spring 5.1.5、SpringSecurity 5.1.4、Hibernate 5.3.7），可直接用于商业系统开发

最新推荐文章于 2019-08-30 17:19:20 发布

大宝CA国密SSL国密TOMCAT

最新推荐文章于 2019-08-30 17:19:20 发布

阅读量629

点赞数

文章标签： Spring SpringMVC SpringSecurity Hibernate DoubleCA

本文链接：https://blog.csdn.net/upset_ming/article/details/87875683

版权

一. 系统简介
1. 后台架构：SpringMVC 5.1.5、Spring 5.1.5、SpringSecurity 5.1.4、Hibernate 5.3.7
2. 前端架构：Bootstrap，兼容JQuery，AJAX
3. 页面设计：SmartAdmin，AJAX + 对话框操作风格，可换6种页面风格和颜色
4. 数据库：MySQL，建库脚本、带基础数据，包括资源数据、角色数据、管理员数据

二. 系统要求
1. Windows系统、Linux系统、Mac系统
2. JDK8及以上
3. JDK使用无限制的安全策略文件

三. 基础功能
1. 登录，管理员初始账号：admin@doubleca.com，密码：DoubleCA

2. 修改账户信息，包括可以重置账户密码

3. 角色管理，可动态管理系统权限和角色，角色列表字段带排序功能

4. 管理员账号管理，可动态管理管理员账号，为管理员动态分配角色和权限，管理员列表字段带排序功能

5. 管理员操作日志，带条件查询功能，日志列表字段带排序功能

6. Session检查功能

7. 退出功能

四. 安全基础功能
1. 数据库密码密文配置功能
2. 账户密码在数据库中的密文存储和验证功能，采用SpringSecurity的密码处理方式，详见SpringSecurity配置文件
3. 排它登录功能，同一管理员账户同一时间只能一处登录
4. 系统自动记录管理员操作日志
5. log4j2的系统日志功能

五. 配置文件
1. Spring配置文件，主要是数据库和事务配置

<context:component-scan base-package="com.doubleca.webapp.frame.lic.**"/>
   <context:component-scan base-package="com.doubleca.webapp.frame.dao.**"/>
   <context:component-scan base-package="com.doubleca.webapp.frame.service.**"/>
   <context:component-scan base-package="com.doubleca.webapp.frame.security.**"/>

   <aop:aspectj-autoproxy proxy-target-class="true"/>

   
   <bean id="propertyConfigurer" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
       <property name="locations">
           <list>
               <value>classpath:config/jdbc.properties</value>
           </list>
       </property>
   </bean>

<bean id="dataSource" class="com.doubleca.db.DCDruidDataSource" init-method="init" destroy-method="close">
       
       <property name="url" value="${jdbc.mysql.url}"/>
       <property name="username" value="${jdbc.mysql.username}"/>
       <property name="password" value="${jdbc.mysql.password}"/>
       <property name="driverClassName" value="${jdbc.mysql.driverClassName}"/>

<property name="initialSize" value="${jdbc.mysql.initialPoolSize}"/>
       <property name="minIdle" value="${jdbc.mysql.miniPoolSize}"/>
       <property name="maxActive" value="${jdbc.mysql.maxPoolSize}"/>

<property name="maxWait" value="60000"/>

<property name="timeBetweenEvictionRunsMillis" value="60000"/>

<property name="minEvictableIdleTimeMillis" value="300000"/>

<property name="poolPreparedStatements" value="true"/>
       <property name="maxPoolPreparedStatementPerConnectionSize" value="20"/>

<property name="removeAbandoned" value="true"/>

<property name="removeAbandonedTimeout" value="1800"/>

<property name="logAbandoned" value="true"/>

<property name="filters" value="stat"/>
   </bean>

<bean id="sessionFactory" class="org.springframework.orm.hibernate5.LocalSessionFactoryBean">
       <property name="dataSource" ref="dataSource"/>
       <property name="packagesToScan">
           <list>
               <value>com.doubleca.webapp.frame.entities.db</value>
               <value>com.doubleca.webapp.frame.dao.impl</value>
           </list>
       </property>
       <property name="hibernateProperties">
           <props>
               <prop key="hibernate.connection.release_mode">after_transaction</prop>
               <prop key="hibernate.dialect">${hibernate.dialect}</prop>
               <prop key="hibernate.show_sql">${hibernate.show_sql}</prop>
               <prop key="hibernate.format_sql">${hibernate.format_sql}</prop>
               
               <prop key="hibernate.hbm2ddl.auto">${hibernate.hbm2ddl.auto}</prop>
               <prop key="hibernate.generate_statistics.generate_statistics">${hibernate.generate_statistics}</prop>
               <prop key="hibernate.max_fetch_depth">${hibernate.max_fetch_depth}</prop>
               
               <prop key="hibernate.cache.use_second_level_cache">${hibernate.cache.use_second_level_cache}</prop>
               <prop key="hibernate.cache.use_query_cache">${hibernate.cache.use_query_cache}</prop>
               <prop key="hibernate.cache.region.factory_class">${hibernate.cache.region.factory_class}</prop>
               <prop key="hibernate.cache.provider_configuration_file_resource_path">${hibernate.cache.provider_configuration_file_resource_path}</prop>
           </props>
       </property>
   </bean>

<bean id="transactionManager" class="org.springframework.orm.hibernate5.HibernateTransactionManager" scope="singleton">
       <property name="sessionFactory" ref="sessionFactory"/>
   </bean>

<tx:advice id="txAdvice" transaction-manager="transactionManager">
       <tx:attributes>
           
           <tx:method name="save*" propagation="REQUIRED"/>
           <tx:method name="insert*" propagation="REQUIRED"/>
           <tx:method name="update*" propagation="REQUIRED"/>
           <tx:method name="delete*" propagation="REQUIRED"/>
           <tx:method name="get*" propagation="SUPPORTS" read-only="true"/>
           <tx:method name="find*" propagation="SUPPORTS" read-only="true"/>
           <tx:method name="select*" propagation="SUPPORTS" read-only="true"/>
           <tx:method name="load*" propagation="SUPPORTS" read-only="true"/>
           <tx:method name="list*" propagation="SUPPORTS" read-only="true"/>
           <tx:method name="query*" propagation="SUPPORTS" read-only="true"/>
           <tx:method name="contains*" propagation="SUPPORTS" read-only="true"/>
           
           <tx:method name="*"/>
       </tx:attributes>
   </tx:advice>

<aop:config>
       <aop:pointcut id="interceptorPointCuts" expression="(execution(* com.doubleca.webapp.frame..*.*(..)))"/>
       <aop:advisor advice-ref="txAdvice" pointcut-ref="interceptorPointCuts"/>
   </aop:config>

   <bean id="messageSource" class="org.springframework.context.support.ReloadableResourceBundleMessageSource">
       <property name="defaultEncoding" value="UTF-8"/>
       <property name="useCodeAsDefaultMessage" value="true"/>
       <property name="cacheSeconds" value="100"></property>
       <property name="basenames">
           <list>
               <value>classpath:config/i18n/messages</value>
           </list>
       </property>
   </bean>

2. SpringMVC配置文件

<context:component-scan base-package="com.doubleca.webapp.frame.controller"/>

<bean id="mappingJacksonHttpMessageConverter" class="org.springframework.http.converter.json.MappingJackson2HttpMessageConverter">
       <property name="supportedMediaTypes">
           <list>
               
               <value>text/html;charset=UTF-8</value>
               
               <value>application/x-www-form-urlencoded</value>
               <value>application/json;charset=UTF-8</value>
           </list>
       </property>
   </bean>

<bean class="org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter">
       <property name="messageConverters">
           <list>
               <ref bean="mappingJacksonHttpMessageConverter"/> 
               <bean class="org.springframework.http.converter.ByteArrayHttpMessageConverter"/>
               <bean class="org.springframework.http.converter.xml.SourceHttpMessageConverter"/>
               <bean class="org.springframework.http.converter.FormHttpMessageConverter"/>
               <bean class="org.springframework.http.converter.StringHttpMessageConverter"/>
           </list>
       </property>
   </bean>

   <mvc:annotation-driven/>

   <mvc:resources location="/dcsmart/" mapping="/dcsmart/**"/>

<bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">
       
       <property name="prefix" value="/WEB-INF/jsp/"></property>
       
       <property name="suffix" value=".jsp"></property>
   </bean>
   
   <bean name="multipartResolver" class="org.springframework.web.multipart.commons.CommonsMultipartResolver">
       
       <property name="defaultEncoding" value="utf-8"/>
       
       <property name="maxUploadSize" value="10485760000"/>
       
       <property name="maxInMemorySize" value="40960"/>
   </bean>

3. SpringSecurity配置文件，与数据库结合的动态权限配置，排它登录配置，RememberME配置，错误退出配置等

<description>SpringSecurity安全配置</description>

   <security:http pattern="/dcsmart/**" security="none" />
   <security:http pattern="/register" security="none" />
   <security:http pattern="/tologin" security="none" />
   <security:http pattern="/tologinerr" security="none" />

<security:http auto-config="false" use-expressions="true" entry-point-ref="authenticationEntryPoint">
       <security:headers>
           <security:frame-options policy="SAMEORIGIN" />
       </security:headers>

<security:request-cache ref="httpSessionRequestCache" />

<security:custom-filter ref="filterSecurityInterceptor" before="FILTER_SECURITY_INTERCEPTOR" />
       <security:custom-filter ref="loginAuthenticationFilter" position="FORM_LOGIN_FILTER" />
       <security:custom-filter ref="concurrencySessionFilter" position="CONCURRENT_SESSION_FILTER" />
       
       <security:custom-filter ref="logoutFilter" position="LOGOUT_FILTER" />

<security:session-management session-authentication-strategy-ref="compositeSessionAuthenticationStrategy" />

<security:csrf disabled="true" token-repository-ref="csrfTokenRepository" />
       <security:access-denied-handler ref="accessDeniedHandler" />

</security:http>

           </list>
       </constructor-arg>
   </bean>

<bean id="accessDeniedHandler" class="org.springframework.security.web.access.AccessDeniedHandlerImpl">
       
   </bean>

<bean id="rememberMeFilter" class="org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter">
       <constructor-arg ref="authenticationManager" />
       <constructor-arg ref="rememberMeServices" />
   </bean>
   <bean id="rememberMeServices" class="org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices">
       <constructor-arg value="key" />
       <constructor-arg ref="loginSysUserDetailsService" />
       <constructor-arg ref="jdbcTokenRepository" />
       <property name="tokenValiditySeconds" value="604800" />
   </bean>

<bean id="logoutFilter" class="org.springframework.security.web.authentication.logout.LogoutFilter">
       <constructor-arg value="/tologin" />
       <property name="filterProcessesUrl" value="/j_spring_security_logout" />
       <constructor-arg>
           <list>
               
               <bean class="org.springframework.security.web.csrf.CsrfLogoutHandler">
                   <constructor-arg ref="csrfTokenRepository" />
               </bean>
               <bean class="org.springframework.security.web.authentication.logout.CookieClearingLogoutHandler">
                   <constructor-arg index="0">
                       <array>
                           <value>JSESSIONID</value>
                           <value>remember-me</value>
                       </array>
                   </constructor-arg>
               </bean>
               <bean class="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler" />
           </list>
       </constructor-arg>
   </bean>

<bean id="filterSecurityInterceptor" class="com.doubleca.webapp.frame.security.interceptor.FilterSecurityInterceptor">
       <property name="authenticationManager" ref="authenticationManager" />
       <property name="accessDecisionManager" ref="securityAccessDecisionManager" />
       <property name="securityMetadataSource" ref="secureResourceFilterInvocationDefinitionSource" />
   </bean>

<bean id="secureResourceFilterInvocationDefinitionSource" class="com.doubleca.webapp.frame.security.interceptor.SecureResourceFilterInvocationDefinitionSource" />
   
   <bean id="securityAccessDecisionManager" class="com.doubleca.webapp.frame.security.interceptor.SecurityAccessDecisionManager" />

<security:authentication-manager alias="authenticationManager">
       <security:authentication-provider ref="authenticationProvider">
       </security:authentication-provider>
   </security:authentication-manager>

   <bean id="authenticationProvider" class="org.springframework.security.authentication.dao.DaoAuthenticationProvider">
       <property name="userDetailsService" ref="loginSysUserDetailsService" />
       <property name="passwordEncoder" ref="bcryptEncoder" />
   </bean>

<bean id="loginSysUserDetailsService" class="com.doubleca.webapp.frame.service.impl.LoginSysUserDetailsService"></bean>

<bean id="bcryptEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder">
       <constructor-arg name="strength" value="11" />
   </bean>

六. 下载地址：获取工程使用授权请联系，QQ：1337588982，免费在 http://www.PPLIC.com 授权平台获取授权数据

工程首次启动后会在运行目录的WEB-INF\classes\config文件夹下生成doubleca-webframe.req文件和doubleca-webframe.lic文件，doubleca-webframe.req为终端授权码请求文件，doubleca-webframe.lic为空文件，申请授权的具体步骤：

1. 访问PP商业软件自主授权平台：https://www.PPLIC.com

2. 点击“应用方入口”

3. “软件1编号”填写：66-F434B41DEE884C869CFE0755CCCAE6DF，免费授权码数量有限，获取请联系QQ：1337588982，将授权码写在“授权码”输入框内，“终端请求授权编码”框内复制doubleca-webframe.req文件的内容

4. 提交授权请求后页面会生成授权数据，将授权数据复制进doubleca-webframe.lic文件，再次运行或调试工程即可完成授权

5. 授权成功后会在WEB-INF\classes\config文件夹下生成doubleca-webframe.9000文件，内有授权到期时间

框架代码下载地址：https://download.csdn.net/download/upset_ming/10973861

授权码保留好，如果授权数据丢失，可凭授权码在PP商业软件自主授权平台 https://www.PPLIC.com找回授权数据

大宝CA国密SSL国密TOMCAT

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
复制链接

分享到 QQ

分享到新浪微博

扫一扫