spring-securing 4 中文PPT.pptx

From 0 to Spring Security 4.0Rob Winch@rob_winchAgendaIntroductionsHello Spring Security (Java Config)Custom AuthenticationSpring Data IntegrationTesting SupportWebSocket SupportWhite Hat HackerAbout MeOpen Source fanaticSpring Security Spring Project LeadCommitter on Spring FrameworkCo-author of Spring Security 3.1 bookTwitter @rob_winchWhat is Spring Security?Comprehensive support for Authentication And AuthorizationProtection against common attacksServlet API IntegrationOptional integration with Spring MVCOptional Spring Data IntegrationWebSocket SupportSPRING SECURITYMessage ApplicationSpring Securityweb.xmlfilter filter-namespringSecurityFilterChain/filter-name filter-classorg.springframework.web.filter.DelegatingFilterProxy /filter-class/filterfilter-mapping filter-namespringSecurityFilterChain/filter-name url-pattern/*/url-pattern/filter-mappingHello Java Configuration – Replaces web.xmlpublic class SecurityWebInitializer extends AbstractSecurityWebApplicationInitializer { // optionally override methods}Hello Java Configuration – WebSecurityConfig@Configuration@EnableWebMvcSecuritypublic class WebSecurityConfig extends WebSecurityConfigurerAdapter {...}Hello Java Configuration – WebSecurityConfig@Autowiredpublic void configureGlobal( AuthenticationManagerBuilder auth) throws Exception { auth .inMemoryAuthentication() .withUser(admin”) .password(password”) .roles(ADMIN,USER) .and() .withUser(user) .password(password) .roles(USER);}Hello Java ConfigurationHello Java ConfigurationHello Java Configurationdiv th:with=currentUser=${#httpServletRequest.userPrincipal?.name} div th:if=${currentUser != null} form th:action=@{/logout} method=post” input type=submit value=Log out / /form p th:text=${currentUser}” sample_user /p/divHello Java Configurationdiv th:with=currentUser=${#httpServletRequest.userPrincipal?.name} div th:if=${currentUser != null} form th:action=@{/logout} method=post” input type=submit value=Log out / /form p th:text=${currentUser}” sample_user /