springsecurity3 配置和使用.

springsecurity3 配置和使用.
最近项目中要使用到spring-security，闲来没事就研究了下。发现入门挺简单的，在这里把自己的心得发下，希望对没有接触过想接触的朋友有帮助。

1、在spring-security官网下载最新jar然后拷贝jar到项目的lib下。
2、在classpath下添加security配置文件,例如applicationContext-security.xml.网上现在大多都是2.0的schema. 要根据自己使用的版本而定.下面是3.0的schema.
Xml代码
1. <?xml version="1.0" encoding="UTF-8"?>
2. <beans:beans xmlns="http://www.springframework.org/schema/security"
3. xmlns:beans="http://www.springframework.org/schema/beans"
4. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
5. xsi:schemaLocation="http://www.springframework.org/schema/beans
6. http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
7. http://www.springframework.org/schema/security
8. http://www.springframework.org/schema/security/spring-security-3.0.xsd">
10. </beans:beans>
```
<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
	xmlns:beans="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans
	http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
	http://www.springframework.org/schema/security
	http://www.springframework.org/schema/security/spring-security-3.0.xsd">

</beans:beans>
```
3、然后在web.xml中添加配置,内容如下:
Xml代码
1. 
2. <context-param>
3. <param-name>contextConfigLocation</param-name>
4. <param-value>
5. classpath*:/applicationContext*.xml
6. </param-value>
7. </context-param>
9. <filter>
10. <filter-name>springSecurityFilterChain</filter-name>
11. <filter-class>
12. org.springframework.web.filter.DelegatingFilterProxy
13. </filter-class>
14. </filter>
15. <filter-mapping>
16. <filter-name>springSecurityFilterChain</filter-name>
17. <url-pattern>/*</url-pattern>
18. </filter-mapping>
19. <listener>
20. <listener-class>
21. org.springframework.web.context.ContextLoaderListener
22. </listener-class>
23. </listener>
```

        <context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>
			classpath*:/applicationContext*.xml
		</param-value>
	</context-param>

	<filter>
		<filter-name>springSecurityFilterChain</filter-name>
		<filter-class>
			org.springframework.web.filter.DelegatingFilterProxy
		</filter-class>
	</filter>
	<filter-mapping>
		<filter-name>springSecurityFilterChain</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>
	<listener>
		<listener-class>
			org.springframework.web.context.ContextLoaderListener
		</listener-class>
	</listener>
```
配置起来很简单,由于我的security是整合到现有项目中的.一些jar可能已经存在. 单独做demo的朋友配置的时候可能会出现问题.

本想分开发挣点积分..但怕大家看起来累.. 就发到一起吧.. (*^__^*)

使用篇

1、建立login.jsp页面.内容如下:
Html代码
1. <form action="<%=path %>/j_spring_security_check" method="post">
2. USERNAME:<input type="text" name="j_username" value="${sessionScope['SPRING_SECURITY_LAST_USERNAME']}" /><br/>
3. PASSWORD:<input type="password" name="j_password" value="" /><br/>
4. <input type="checkbox" name="_spring_security_remember_me" />两周之内不必登陆<br/>
5. <input type="submit">
6. </form>
```
<form action="<%=path %>/j_spring_security_check" method="post">
    	USERNAME:<input type="text" name="j_username" value="${sessionScope['SPRING_SECURITY_LAST_USERNAME']}" /><br/>
    	PASSWORD:<input type="password" name="j_password" value="" /><br/>
    	<input type="checkbox" name="_spring_security_remember_me" />两周之内不必登陆<br/>
		<input type="submit">    	
    </form>
```
j_spring_security_check : 为security验证中心(不知道怎么说合适.暂时这么理解吧..).
j_username: 验证用户名;
j_password: 验证密码;
${sessionScope['SPRING_SECURITY_LAST_USERNAME']}:使用最后一次登录用户名.
_spring_security_remember_me:记住我...

2、xml配置,配置内容如下:
Xml代码
1. <?xml version="1.0" encoding="UTF-8"?>
2. <beans:beans xmlns="http://www.springframework.org/schema/security"
3. xmlns:beans="http://www.springframework.org/schema/beans"
4. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
5. xsi:schemaLocation="http://www.springframework.org/schema/beans
6. http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
7. http://www.springframework.org/schema/security
8. http://www.springframework.org/schema/security/spring-security-3.0.xsd">
10. 
13. <http auto-config="true" access-denied-page="/common/403.jsp">
14. 
15. <intercept-url pattern="/index.jsp" access="ROLE_USER" />
16. <intercept-url pattern="/login.jsp" filters="none" />
17. <intercept-url pattern="/common/**" filters="none" />
18. <intercept-url pattern="/script/**" filters="none" />
19. <intercept-url pattern="/admin.jsp" access="ROLE_ADMIN" />
20. <intercept-url pattern="/user.jsp" access="ROLE_USER" />
22. 
23. 
27. <session-management session-fixation-protection="none">
28. <concurrency-control/>
29. </session-management>
31. 
32. <form-login login-page="/login.jsp"
33. authentication-failure-url="/common/403.jsp"
34. default-target-url="/admin.jsp" />
35. 
36. <logout logout-success-url="/login.jsp"/>
37. <http-basic />
39. </http>
41. 
51. 
52. <authentication-manager>
53. <authentication-provider>
54. 
61. 
62. <jdbc-user-service data-source-ref="dataSource"
63. users-by-username-query="select username,password,enabled from user where username = ? and enabled = 1"
64. authorities-by-username-query="select u.username,r.name from user u join user_role ur on u.uid = ur.uid join role r on r.rid = ur.rid where u.username = ?" />
65. 
72. </authentication-provider>
73. </authentication-manager>
74. 
78. 
85. </beans:beans>
```
<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
	xmlns:beans="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans
	http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
	http://www.springframework.org/schema/security
	http://www.springframework.org/schema/security/spring-security-3.0.xsd">

	
	<http auto-config="true" access-denied-page="/common/403.jsp">
		
		<intercept-url pattern="/index.jsp" access="ROLE_USER" />
		<intercept-url pattern="/login.jsp" filters="none" />
		<intercept-url pattern="/common/**" filters="none" />
		<intercept-url pattern="/script/**" filters="none" />
		<intercept-url pattern="/admin.jsp" access="ROLE_ADMIN" />
		<intercept-url pattern="/user.jsp" access="ROLE_USER" />
		
		
		
		<session-management session-fixation-protection="none">
			<concurrency-control/>
		</session-management>
		
		
		<form-login login-page="/login.jsp"
			authentication-failure-url="/common/403.jsp"
			default-target-url="/admin.jsp" />
		
		<logout logout-success-url="/login.jsp"/>
		<http-basic />
		
	</http>

	

	
	<authentication-manager>
		<authentication-provider>
			
			 
			<jdbc-user-service data-source-ref="dataSource"
				users-by-username-query="select username,password,enabled from user where username = ? and enabled = 1"
				authorities-by-username-query="select u.username,r.name from user u join user_role ur on u.uid = ur.uid join role r on r.rid = ur.rid where u.username = ?" />
			
		</authentication-provider>
	</authentication-manager>
	
	
	
</beans:beans>
```
以上配置结束后可以完成用户登录\权限验证等操作.
配置和使用到这里就结束了. 今天下午的小心得.. spring-security很强大. 在这里感谢family168的在线帮助. 谢谢.. 希望对没有接触过spring-security的朋友有所帮助.

注：这是我复制别人的。
相关阅读:
前端自动化测试python+webdriver
JavaScript 事件——“事件类型”中“HTML5事件”的注意要点
 onpageshow 监听页面是否是缓存页面
 CSS完美实现iframe高度自适应（支持跨域）
HTML5 简单归纳 -- 前端知识（一）
JavaScrip 概述 -- 前端知识
 CSS 简单归纳 -- 前端知识
 HTML 简单归纳 -- 前端知识
 解决vscode-insider连接不了远程服务器问题
 回首，只为再出发！
原文地址：https://www.cnblogs.com/wenxiu/p/1942084.html