spring_security3.2 详细配置 培训笔记.docx

Spring Security 3.x 出来一段时间了，跟Acegi是大不同了，与2.x的版本也有一些小小的区别，网上有一些文档，也有人翻译Spring Security 3.x的guide，但通过阅读guide，无法马上就能很容易的实现一个完整的实例。我花了点儿时间，根据以前的实战经验，整理了一份完整的入门教程，供需要的朋友们参考。1，建一个web project，并导入所有需要的lib，这步就不多讲了。2，配置web.xml，使用Spring的机制装载：?xml?version=1.0?encoding=UTF-8?web-app?version=2.4?xmlns=/xml/ns/j2ee????xmlns:xsi=/2001/XMLSchema-instance????xsi:schemaLocation=/xml/ns/j2ee?????/xml/ns/j2ee/web-app_2_4.xsd????context-param????????param-namecontextConfigLocation/param-name????????param-valueclasspath:applicationContext*.xml/param-value????/context-param????listener????????listener-class????????????org.springframework.web.context.ContextLoaderListener????????/listener-class????/listener????filter????????filter-namespringSecurityFilterChain/filter-name????????filter-class????????????org.springframework.web.filter.DelegatingFilterProxy????????/filter-class????/filter????filter-mapping????????filter-namespringSecurityFilterChain/filter-name????????url-pattern/*/url-pattern????/filter-mapping????welcome-file-list????????welcome-filelogin.jsp/welcome-file????/welcome-file-list/web-app这个文件中的内容我相信大家都很熟悉了，不再多说了。2，来看看applicationContext-security.xml这个配置文件，关于Spring Security的配置均在其中：?xml?version=1.0?encoding=UTF-8?beans:beans?xmlns=/schema/security????xmlns:beans=/schema/beans????xmlns:xsi=/2001/XMLSchema-instance????xsi:schemaLocation=/schema/beans???????????/schema/beans/spring-beans-3.0.xsd???????????/schema/security???????????/schema/security/spring-security-3.0.xsd????http?access-denied=/403.jsp!--?当访问被拒绝时，会转到403.jsp?--????????intercept-url?pattern=/login.jsp?filters=none?/????????form-login?login=/login.jsp????????????authentication-failure-url=/login.jsp?error=true????????????default-target-url=/index.jsp?/????????logout?logout-success-url=/login.jsp?/????????http-basic?/????????!--?增加一个filter，这点与Acegi是不一样的，不能修改默认的filter了，这个filter位于FILTER_SECURITY_INTERCEPTOR之前?--????????custom-filter?before=FILTER_SECURITY_INTERCEPTOR????????????ref=myFilter?/????/http????!--?一个自定义的filter，必须