Sprting security安全框架配置maven构建项目

pom.xml

4.0.0
cn.qiupengfei.test
spring-security-demo
war
0.0.1-SNAPSHOT

<spring.version>4.2.4.RELEASE</spring.version>

<dependencies>

	<dependency>
		<groupId>org.springframework</groupId>
		<artifactId>spring-core</artifactId>
		<version>${spring.version}</version>
	</dependency>
	<dependency>
		<groupId>org.springframework</groupId>
		<artifactId>spring-web</artifactId>
		<version>${spring.version}</version>
	</dependency>

	<dependency>
		<groupId>org.springframework</groupId>
		<artifactId>spring-webmvc</artifactId>
		<version>${spring.version}</version>
	</dependency>

	<dependency>
		<groupId>org.springframework</groupId>
		<artifactId>spring-context-support</artifactId>
		<version>${spring.version}</version>
	</dependency>

	<dependency>
		<groupId>org.springframework</groupId>
		<artifactId>spring-test</artifactId>
		<version>${spring.version}</version>
	</dependency>

	<dependency>
		<groupId>org.springframework</groupId>
		<artifactId>spring-jdbc</artifactId>
		<version>${spring.version}</version>
	</dependency>

	<dependency>
		<groupId>org.springframework.security</groupId>
		<artifactId>spring-security-web</artifactId>
		<version>4.1.0.RELEASE</version>
	</dependency>

	<dependency>
		<groupId>org.springframework.security</groupId>
		<artifactId>spring-security-config</artifactId>
		<version>4.1.0.RELEASE</version>
	</dependency>

	<dependency>
		<groupId>javax.servlet</groupId>
		<artifactId>servlet-api</artifactId>
		<version>2.5</version>
		<scope>provided</scope>
	</dependency>


</dependencies>
<build>
  <plugins>		
      <!-- java编译插件 -->
	  <plugin>
			<groupId>org.apache.maven.plugins</groupId>
			<artifactId>maven-compiler-plugin</artifactId>
			<version>3.2</version>
			<configuration>
				<source>1.7</source>
				<target>1.7</target>
				<encoding>UTF-8</encoding>
			</configuration>
	  </plugin>      
      <plugin>
			<groupId>org.apache.tomcat.maven</groupId>
			<artifactId>tomcat7-maven-plugin</artifactId>
			<configuration>
				<!-- 指定端口 -->
				<port>9090</port>
				<!-- 请求路径 -->
				<path>/</path>
			</configuration>
  	  </plugin>
   </plugins>  
</build>

web.xml

<?xml version="1.0" encoding="UTF-8"?>

 <context-param>
	<param-name>contextConfigLocation</param-name>
	<param-value>classpath:spring-security.xml</param-value>
 </context-param>
 <listener>
	<listener-class>
		org.springframework.web.context.ContextLoaderListener
	</listener-class>
 </listener>

 <filter>  
	<filter-name>springSecurityFilterChain</filter-name>  
	<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>  
 </filter>  
 <filter-mapping>  
	<filter-name>springSecurityFilterChain</filter-name>  
	<url-pattern>/*</url-pattern>  
 </filter-mapping> 

spring-security.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans:beans xmlns=“http://www.springframework.org/schema/security”
xmlns:beans=“http://www.springframework.org/schema/beans” xmlns:xsi=“http://www.w3.org/2001/XMLSchema-instance”
xsi:schemaLocation=“http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd”>

	<!-- 配置页面拦截规则  use-expressions:是否启动spel表达式  启动后 access = "hasRole('ROLE_USER')" 写法-->
	
	<http use-expressions="false">
	
	   <!-- 当前用户必须有ROLE_USER的角色才可以访问根目录及所属子目录的资源 -->
	    <intercept-url pattern="/**" access="ROLE_USER"/>
	 
	<!-- 开启表单登陆功能 -->
	<form-login/>
	</http>
	
	<!-- 配置认证管理器 -->
	<authentication-manager>
	   <authentication-provider>
	   
	      <user-service>
	      
	       <!-- 定义一个用户  name：用户名称  password:定义用户密码  authorities：用户角色 -->
	      
	        <user name="admin"  password="123456" authorities="ROLE_USER"/>
	         
	      </user-service>
	         
	   </authentication-provider>
	        
	</authentication-manager>

</beans:beans>