JAVA-WBE——spring security 3.2 认证-学习笔记2

2019独角兽企业重金招聘Python工程师标准>>>

spring-security.xml

简单实现用户登录 （不连接数据库）

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
	xmlns:beans="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/security
	http://www.springframework.org/schema/security/spring-security-3.2.xsd	
	http://www.springframework.org/schema/beans
	http://www.springframework.org/schema/beans/spring-beans-4.0.xsd" >

<debug/>
<authentication-manager>
<authentication-provider>
 <user-service>
 <user name="yexianglei" authorities="USER" password="123456"/>
 <user name="admin" authorities="USER,ADMIN" password="admin"/>
 </user-service>
</authentication-provider>

</authentication-manager>

<http security="none" pattern="/resource/**"></http>
<http security="none" pattern="/jsp/**"></http>
<http use-expressions="true">

 
<intercept-url pattern="/login" access="permitAll"/> 

<intercept-url pattern="/mapcontroller/**" access="hasAuthority('ADMIN')"/>


<form-login  login-page="/login.jsp" login-processing-url="/login" 
authentication-failure-url="/login_error.do?error=true" default-target-url="/login_success.do"
username-parameter="username" password-parameter="password" 
/>
<logout logout-url="/logout.do" logout-success-url="/logout_success.do" 
invalidate-session="true" delete-cookies="JSESSIONID"/>






</http>



</beans:beans>

 

转载于:https://my.oschina.net/xiaoshoubingliang/blog/873629