SpringSecurity权限管理——自定义表结构！！！

最新推荐文章于 2023-12-04 09:59:19 发布

事后诸葛亮

最新推荐文章于 2023-12-04 09:59:19 发布

阅读量1.4k

点赞数

分类专栏： Security 文章标签： insert table user access encoding join

本文链接：https://blog.csdn.net/zq9017197/article/details/6090542

版权

Security 专栏收录该内容

3 篇文章 0 订阅

订阅专栏

本文介绍了一个使用SpringSecurity实现权限管理的具体案例，包括数据库表结构的设计、用户认证及授权配置等核心步骤。通过定义角色、用户及用户角色关联表，并在applicationContext.xml中配置HTTP拦截规则、登录表单及认证提供者。

摘要由CSDN通过智能技术生成

这次的记录是紧接着上次（SpringSecurity管理自己的项目——权限管理！！！）说的！

区别仅仅在于数据库脚本和applicationContext.xml不同

tb.sql

drop table users_role; drop table role; drop table users; -- 角色 create table role( id int primary key, name varchar(50), descn varchar(200) ); -- 用户 create table users( id int primary key, username varchar(50), password varchar(50), status int, descn varchar(200) ); -- 用户角色连接表 create table users_role( user_id int, role_id int, constraint fk_user_id foreign key(user_id) references users(id), constraint fk_role_id foreign key(role_id) references role(id) ); insert into users values(1,'admin','admin',1,'管理员'); insert into users values(2,'user','user',1,'用户'); insert into role values(1,'ROLE_ADMIN','管理员角色'); insert into role values(2,'ROLE_USER','用户角色'); insert into users_role values(1,1); insert into users_role values(1,2); insert into users_role values(2,2); commit;

applicationContext.xml

<?xml version="1.0" encoding="UTF-8"?> <beans:beans xmlns="http://www.springframework.org/schema/security" xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd"> <http auto-config="true" access-denied-page="/accessDenied.jsp"> <concurrent-session-control exception-if-maximum-exceeded="true"/> <intercept-url pattern="/login.jsp" access="IS_AUTHENTICATED_ANONYMOUSLY" /> <intercept-url pattern="/admin.jsp" access="ROLE_ADMIN" /> <intercept-url pattern="/**" access="ROLE_USER" /> <form-login login-page="/login.jsp" authentication-failure-url="/login.jsp?error=true" default-target-url="/" /> </http> <authentication-provider> <password-encoder hash="md5"> <salt-source user-property="username"/> </password-encoder> <jdbc-user-service data-source-ref="dataSource" cache-ref="userCache" users-by-username-query="select username,password,status as enabled from users where username=?" authorities-by-username-query="select u.username,r.name as authority from users u join users_role ur on u.id=ur.user_id join role r on r.id=ur.role_id where u.username=?" /> </authentication-provider> <beans:bean id="dataSource" class="org.springframework.jdbc.datasource.DriverManagerDataSource"> <beans:property name="driverClassName" value="oracle.jdbc.driver.OracleDriver"/> <beans:property name="url" value="jdbc:oracle:thin:@127.0.0.1:1521:orcl"/> <beans:property name="username" value="scott"/> <beans:property name="password" value="tiger"/> </beans:bean> </beans:beans>