初识spring security配置版（一）

最新推荐文章于 2022-11-03 17:14:04 发布

玄妙之门

最新推荐文章于 2022-11-03 17:14:04 发布

阅读量446

点赞数

分类专栏：笔记文章标签： spring boot

本文链接：https://blog.csdn.net/yangfenggh/article/details/122145207

版权

笔记专栏收录该内容

55 篇文章 0 订阅

订阅专栏

开发工具IDEA，新建maven项目，通过webapp模板新建，项目名称定义为：
security01
修改pom文件引入所需的依赖

<?xml version="1.0" encoding="UTF-8"?>

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>

  <groupId>com.yf.cn</groupId>
  <artifactId>security01</artifactId>
  <version>1.0-SNAPSHOT</version>
  <packaging>war</packaging>

  <name>security01 Maven Webapp</name>
  <!-- FIXME change it to the project's website -->
  <url>http://www.example.com</url>

  <properties>
    <jdk.version>1.8</jdk.version>
    <spring.version>4.3.10.RELEASE</spring.version>
    <spring.security.version>4.2.3.RELEASE</spring.security.version>
    <jstl.version>1.2</jstl.version>
    <servlet.version>2.5</servlet.version>
  </properties>

  <dependencies>
    <dependency>
      <groupId>junit</groupId>
      <artifactId>junit</artifactId>
      <version>4.12</version>
      <scope>test</scope>
    </dependency>
    <!-- Spring dependencies -->
    <dependency>
      <groupId>org.springframework</groupId>
      <artifactId>spring-core</artifactId>
      <version>${spring.version}</version>
    </dependency>

    <dependency>
      <groupId>org.springframework</groupId>
      <artifactId>spring-web</artifactId>
      <version>${spring.version}</version>
    </dependency>

    <dependency>
      <groupId>org.springframework</groupId>
      <artifactId>spring-webmvc</artifactId>
      <version>${spring.version}</version>
    </dependency>

    <!-- Spring Security -->
    <dependency>
      <groupId>org.springframework.security</groupId>
      <artifactId>spring-security-web</artifactId>
      <version>${spring.security.version}</version>
    </dependency>

    <dependency>
      <groupId>org.springframework.security</groupId>
      <artifactId>spring-security-config</artifactId>
      <version>${spring.security.version}</version>
    </dependency>

    <!-- jstl for jsp page -->
    <dependency>
      <groupId>jstl</groupId>
      <artifactId>jstl</artifactId>
      <version>${jstl.version}</version>
    </dependency>
    <dependency>
      <groupId>javax.servlet</groupId>
      <artifactId>servlet-api</artifactId>
      <version>${servlet.version}</version>
      <scope>provided</scope>
    </dependency>

    <dependency>
      <groupId>com.fasterxml.jackson.core</groupId>
      <artifactId>jackson-databind</artifactId>
      <version>2.9.5</version>
    </dependency>
  </dependencies>

  <build>
    <finalName>security01</finalName>
    <plugins>
      <!-- jdk版本插件 -->
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-compiler-plugin</artifactId>
        <version>3.2</version>
        <configuration>
          <source>1.8</source>
          <target>1.8</target>
          <encoding>UTF-8</encoding>
          <showWarnings>true</showWarnings>
        </configuration>
      </plugin>

      <!-- tomcat7插件 -->
      <plugin>
        <groupId>org.apache.tomcat.maven</groupId>
        <artifactId>tomcat7-maven-plugin</artifactId>
        <version>2.1</version>
        <configuration>
          <port>8089</port>
          <path>/ss1</path>
          <server>tomcat7</server>
        </configuration>
      </plugin>
    </plugins>
  </build>
</project>

配置web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xmlns="http://java.sun.com/xml/ns/javaee"
         xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
         version="2.5">


  <!-- SpringSecurity过滤器链  -->
  <filter>
    <filter-name>springSecurityFilterChain</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
  </filter>
  <filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>/*</url-pattern>
  </filter-mapping>
  <!-- spring启动 -->
  <listener>
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
  </listener>
  <context-param>
    <param-name>contextConfigLocation</param-name>
    <param-value>
      classpath:application-context.xml
      classpath:spring-security.xml
    </param-value>
  </context-param>

  <!-- 启动springMvc -->
  <servlet>
    <servlet-name>DispatcherServlet</servlet-name>
    <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
    <init-param>
      <param-name>contextConfigLocation</param-name>
      <param-value>classpath:springmvc.xml</param-value>
    </init-param>
    <load-on-startup>1</load-on-startup>
  </servlet>
  <servlet-mapping>
    <servlet-name>DispatcherServlet</servlet-name>
    <url-pattern>/</url-pattern>
  </servlet-mapping>
</web-app>

在springmvc配置文件中配置视图解析器：springmvc.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:mvc="http://www.springframework.org/schema/mvc"
       xmlns:contenxt="http://www.springframework.org/schema/context"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation="
        http://www.springframework.org/schema/beans
        http://www.springframework.org/schema/beans/spring-beans.xsd
        http://www.springframework.org/schema/mvc
        http://www.springframework.org/schema/mvc/spring-mvc.xsd
        http://www.springframework.org/schema/context
        http://www.springframework.org/schema/context/spring-context.xsd">
    <!-- 注解驱动-->
    <mvc:annotation-driven/>
   <contenxt:component-scan base-package="com.yf.cn.controller"/>
   
   <!-- 视图解析器配置 -->
   
   <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">
   
     <property name="prefix" value="/WEB-INF/jsp/"/>
     
     <property name="suffix" value=".jsp"/>
   
   </bean>
        
</beans>

在java问价夹下创建com.yf.cn.controller包，并创建CenterController

package com.yf.cn.controller;

import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;

@Controller
public class CenterController {
    @RequestMapping("/index")
    public String index(){
        return "index";
    }
}

启动项目
双击tomcat7:run,查看启动日志发现报错，提示找不到security过滤器链
此时需要的security配置文件中添加如下代码，添加完成后重启，发现项目可以正常启动

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:security="http://www.springframework.org/schema/security"
       xsi:schemaLocation="http://www.springframework.org/schema/beans
            http://www.springframework.org/schema/beans/spring-beans-4.2.xsd
            http://www.springframework.org/schema/security
            http://www.springframework.org/schema/security/spring-security-4.2.xsd">
        <security:http>
                <security:http-basic/>
        </security:http>
        <security:authentication-manager>

        </security:authentication-manager>
</beans>

项目访问

10.输入访问路径，如上图所示能够成功访问首页，说明项目的初步整个已经完成，加下来我们要做的是新增访问的资源，并添加对应的访问控制，在WEB-INF下新建product文件夹，并在该文件夹下新建list.jsp、add.jsp、update.jsp、delete.jsp,在controller中添加对应的界面跳转，在index添加产品对应的访问链接，如下为index.jsp,重启项目,并访问首页，点击对应的链接，查看添加的产品界面是否能够正常访问

<%@ page language="java" contentType="text/html; charset=UTF-8"
    pageEncoding="UTF-8"%>
<%
  String path = request.getContextPath();
%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>首页</title>
</head>
<body>
 以下是我们网站的一些功能：
 <br/>
 <a href="<%=path %>/product/add">商品添加</a><br/>
 <a href="<%=path %>/product/update">商品修改</a><br/>
 <a href="product/findAll">商品列表</a><br/>
 <a href="product/delete">商品删除</a><br/>
 <a href="ztreeDemo01">简单数展示</a><br/>
</body>
</html>

在这里插入图片描述

接下来在security中添加对资源的访问控制，在spring-security.xml中添加资源拦截

<security:http>
                <security:intercept-url pattern="/**" access="isFullyAuthenticated()"/>
                <security:http-basic/>
        </security:http>

配置如上代码后，所有的资源都会被拦截，重启项目，访问首页弹出登录页面，说明拦截配置已经生效
在这里插入图片描述

登录账户信息配置

<security:authentication-manager>
                <security:authentication-provider>
                        <security:user-service>
                                <security:user name="eric" password="123456" authorities="ROLE_USER"/>
                        </security:user-service>
                </security:authentication-provider>

        </security:authentication-manager>

重启系统，访问首页，使用配置的账号和密码进行登录，可以成功跳转到首页，并且资源也可以访问，httpBasc方式认证配置文件如下：

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:security="http://www.springframework.org/schema/security"
       xsi:schemaLocation="http://www.springframework.org/schema/beans
            http://www.springframework.org/schema/beans/spring-beans-4.2.xsd
            http://www.springframework.org/schema/security
            http://www.springframework.org/schema/security/spring-security-4.2.xsd">
        <security:http>
                <security:intercept-url pattern="/**" access="isFullyAuthenticated()"/>
                <security:http-basic/>
        </security:http>
        <security:authentication-manager>
                <security:authentication-provider>
                        <security:user-service>
                                <security:user name="eric" password="123456" authorities="ROLE_USER"/>
                        </security:user-service>
                </security:authentication-provider>

        </security:authentication-manager>
</beans>