spring security基本配置

清疚 2022-06-08 03:53 296阅读 0赞

我使用的是spring mvc+maven的建构，欢迎大家来指点，提供新的想法。

# 1.maven引入jar包依赖 #

<dependency>  
      <groupId>org.springframework.security</groupId>  
      <artifactId>spring-security-config</artifactId>  
      <version>3.2.8.RELEASE</version>  
      <scope>runtime</scope>  
    </dependency>  
    <dependency>  
      <groupId>org.springframework.security</groupId>  
      <artifactId>spring-security-web</artifactId>  
      <version>3.2.8.RELEASE</version>  
    </dependency>  
    <dependency>  
      <groupId>org.springframework.security</groupId>  
      <artifactId>spring-security-taglibs</artifactId>  
      <version>3.2.8.RELEASE</version>  
    </dependency>  
      
    <dependency>    
 <groupId>org.springframework.security</groupId>    
 <artifactId>spring-security-core</artifactId>    
 <version>3.2.8.RELEASE</version>    
</dependency>    
      
  <dependency>  
<groupId>javax.servlet</groupId>  
<artifactId>javax.servlet-api</artifactId>  
<version>3.1.0</version>  
</dependency>  
  
  
      
  <dependency>  
        <groupId>org.springframework</groupId>  
        <artifactId>spring-core</artifactId>  
        <version>3.2.8.RELEASE</version>  
    </dependency>  
    
    <dependency>  
        <groupId>org.springframework</groupId>  
        <artifactId>spring-web</artifactId>  
        <version>3.2.8.RELEASE</version>  
    </dependency>  
    
    <dependency>  
        <groupId>org.springframework</groupId>  
        <artifactId>spring-webmvc</artifactId>  
        <version>3.2.8.RELEASE</version>  
    </dependency>  
   
    <dependency>  
        <groupId>org.codehaus.jackson</groupId>  
        <artifactId>jackson-mapper-asl</artifactId>  
        <version>1.7.1</version>  
    </dependency>  
    <dependency>  
      <groupId>junit</groupId>  
      <artifactId>junit</artifactId>  
      <version>3.8.1</version>  
      <scope>test</scope>  
    </dependency>  
    <dependency>  
    <groupId>commons-fileupload</groupId>  
    <artifactId>commons-fileupload</artifactId>  
    <version>1.3.1</version>  
    </dependency>  
  
  
    <dependency>  
    <groupId>org.springframework</groupId>  
    <artifactId>spring-context</artifactId>  
    <version>3.2.8.RELEASE</version>  
    </dependency>  
      
    <dependency>   
<groupId> org.springframework</groupId>   
<artifactId> spring-framework-bom </artifactId>   
<version> 3.2.8.RELEASE </version>   
<type> pom </type >   
<scope> import </scope>   
</dependency>  
    <dependency>  
    <groupId>taglibs</groupId>  
    <artifactId>standard</artifactId>  
    <version>1.1.2</version>  
    </dependency>  
    <dependency>  
    <groupId>javax.servlet</groupId>  
    <artifactId>jstl</artifactId>  
    <version>1.2</version>  
    </dependency>

注意：不建议修改jar包的版本，比较容易因为版本问题而引发jar包的冲突，如果在项目加载的时候就出现异常的话比较建议大家去检查有没有jar包的冲突，大部分都是因为这个。如果想验证是不是得话可以通过删减可能发生冲突的jar包的依赖来判断。

![Center][]

这个是所有的jar包，小伙伴们可以做个参考，如果不使用maven朋友可以手动导入jar包，并没有影响.

# 2.设置applicatoin\_security.xml #

<?xml version="1.0" encoding="UTF-8"?>    
<beans xmlns="http://www.springframework.org/schema/beans"    
    xmlns:sec="http://www.springframework.org/schema/security"    
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"    
    xsi:schemaLocation="http://www.springframework.org/schema/beans    
        http://www.springframework.org/schema/beans/spring-beans-3.0.xsd    
        http://www.springframework.org/schema/security    
        http://www.springframework.org/schema/security/spring-security-3.1.xsd">    
    
        
    <sec:http pattern="/\*\*/\*.css" security="none"></sec:http>    
    <sec:http pattern="/\*\*/\*.jpg" security="none"></sec:http>    
    <sec:http pattern="/\*\*/\*.jpeg" security="none"></sec:http>    
    <sec:http pattern="/\*\*/\*.gif" security="none"></sec:http>    
    <sec:http pattern="/\*\*/\*.png" security="none"></sec:http>    
    <sec:http pattern="/js/\*.js" security="none"></sec:http>    
    <sec:http pattern="/login.jsp" security="none"></sec:http>    
    <sec:http pattern="/getCode" security="none" />    
    <sec:http pattern="/test/\*\*" security="none"></sec:http>    
        
    <sec:http auto-config="true">    
            
        <sec:intercept-url pattern="/app.jsp" access="ROLE\_SERVICE"/>    
        <sec:intercept-url pattern="/\*\*" access="ROLE\_ADMIN"/>    
                
    </sec:http>    
        
    <sec:authentication-manager>    
        <sec:authentication-provider>    
            <sec:user-service >    
                <sec:user name="admin" password="admin" authorities="ROLE\_ADMIN"/>    
            </sec:user-service>    
        </sec:authentication-provider>    
    </sec:authentication-manager>    
        
</beans>

# 3.配置web.xml #

<?xml version="1.0" encoding="UTF-8"?>  
  
</param-value>  
  </context-param>  
  <listener>  
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>  
  </listener>  
    
    
  <filter>  
     <filter-name>springSecurityFilterChain</filter-name>  
     <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>  
  </filter>  
    
  <filter-mapping>  
      <filter-name>springSecurityFilterChain</filter-name>  
      <url-pattern>/\*</url-pattern>  
  </filter-mapping>  
    
    
    
  <servlet>  
  <servlet-name>DispathcherServlet</servlet-name>  
  <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>  
  <init-param>  
  <param-name>contextConfigLocation</param-name>

<param-value>classpath:application\_security.xml</param-value>  
  </init-param>  
  </servlet>  
  <servlet-mapping>  
  <servlet-name>DispathcherServlet</servlet-name>  
  <url-pattern>\*.do</url-pattern>  
  </servlet-mapping>  
    
      
  
    
</web-app>

#     #

# 4.启动项目 #

到上面位置一个spring security+maven的项目的基本配置就完成了，启动项目就可以进行登陆测试了。访问地址:localhost:ip：端口号/项目名/login.jsp

这就是构建了一个基本的架构，下一篇中将会给大家介绍如何做一个自己的登陆页面和动态的配置用户和权限

[Center]: /images/20220608/9d8e587f66c047e8a0486192dfc1677d.png