Acegi配置实例

阳光穿透心脏的1/2处 2022-07-12 15:57 192阅读 0赞

1、在web.xml中

<context-param>  
  <param-name>contextConfigLocation</param-name>  
  <param-value>  
   /WEB-INF/context/applicationContext-\*.xml  
  </param-value>  
    </context-param>

<filter>  
     <filter-name>Acegi Filter Chain Proxy</filter-name>  
     <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>   
     <init-param>  
      <param-name>targetBeanName</param-name>  
      <param-value>filterChainProxy</param-value>  
    </init-param>  
   </filter>

<filter-mapping>  
      <filter-name>Acegi Filter Chain Proxy</filter-name>  
      <url-pattern>/j\_oa\_security\_check</url-pattern>  
    </filter-mapping>  
     
      
 <filter-mapping>  
      <filter-name>Acegi Filter Chain Proxy</filter-name>  
      <url-pattern>/j\_spring\_security\_logout</url-pattern>  
    </filter-mapping>  
     
    <filter-mapping>  
      <filter-name>Acegi Filter Chain Proxy</filter-name>  
      <url-pattern>\*.ao</url-pattern>  
    </filter-mapping>  
     
    <filter-mapping>  
      <filter-name>Acegi Filter Chain Proxy</filter-name>  
      <url-pattern>\*.jsp</url-pattern>  
    </filter-mapping>  
   
 <filter-mapping>  
      <filter-name>Acegi Filter Chain Proxy</filter-name>  
      <url-pattern>\*.servlet</url-pattern>  
    </filter-mapping>  
     
    <filter-mapping>  
      <filter-name>Acegi Filter Chain Proxy</filter-name>  
      <url-pattern>\*.editDoc</url-pattern>  
    </filter-mapping>  
    <filter-mapping>  
      <filter-name>Acegi Filter Chain Proxy</filter-name>  
      <url-pattern>\*.openAccessory</url-pattern>  
    </filter-mapping>

2、applicationContext-acegi-security.xml中

<?xml version="1.0" encoding="UTF-8"?>   
<beans xmlns="[http://www.springframework.org/schema/beans][http_www.springframework.org_schema_beans]"   
    xmlns:xsi="[http://www.w3.org/2001/XMLSchema-instance][http_www.w3.org_2001_XMLSchema-instance]"   
    xmlns:security="[http://www.springframework.org/schema/security][http_www.springframework.org_schema_security]"   
    xsi:schemaLocation="[http://www.springframework.org/schema/beans][http_www.springframework.org_schema_beans] [http://www.springframework.org/schema/beans/spring-beans-2.0.xsd][http_www.springframework.org_schema_beans_spring-beans-2.0.xsd] [http://www.springframework.org/schema/security][http_www.springframework.org_schema_security] [http://www.springframework.org/schema/security/spring-security-2.0.xsd][http_www.springframework.org_schema_security_spring-security-2.0.xsd]">  
   
   
   
  
 <bean id="filterChainProxy" class="org.springframework.security.util.FilterChainProxy">  
  <security:filter-chain-map path-type="ant">   
       
            <security:filter-chain pattern="/\*\*"   
                filters="httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,exceptionTranslationFilter,filterInvocationInterceptor" />   
        </security:filter-chain-map>  
 </bean>  
   
   
     <!--  
         通过Providers提供认证者列表,如果一个认证提供者失败可以尝试另外一个认证提供者,以保证获取不同来源的身份认证，如  
         DaoAuthenticationProvider 从数据库中读取用户信息验证身份  
         AnonymousAuthenticationProvider 匿名用户身份认证  
         RememberMeAuthenticationProvider 已存cookie中的用户信息身份认证

其它的还有  
         AuthByAdapterProvider 使用容器的适配器验证身份  
         CasAuthenticationProvider 根据Yale中心认证服务验证身份, 用于实现单点登录  
         JaasAuthenticationProvider 从JASS登录配置中获取用户信息验证身份  
         RemoteAuthenticationProvider 根据远程服务验证用户身份  
         RunAsImplAuthenticationProvider 对身份已被管理器替换的用户进行验证  
         X509AuthenticationProvider 从X509认证中获取用户信息验证身份  
         TestingAuthenticationProvider 单元测试时使用

每个认证者会对自己指定的证明信息进行认证，如DaoAuthenticationProvider仅对UsernamePasswordAuthenticationToken这个证明信息进行认证。  
     -->  
    <bean id="authenticationManager" class="org.springframework.security.providers.ProviderManager">  
     <property name="providers">  
         <list>  
          <ref local="daoAuthenticationProvider"/>  
            
            
            <ref local="anonymousAuthenticationProvider"/>  
    <ref local="rememberMeAuthenticationProvider"/>  
         </list>  
      </property>  
   </bean>  
    
     
     
 <bean id="anonymousAuthenticationProvider" class="org.springframework.security.providers.anonymous.AnonymousAuthenticationProvider">  
  <property name="key" value="blhOaWebKey2"/>  
 </bean>  
   
  <bean id="passwordEncoder" class="org.springframework.security.providers.encoding.Md5PasswordEncoder"/>  
   
 <bean id="daoAuthenticationProvider" class="org.springframework.security.providers.dao.DaoAuthenticationProvider">  
       <property name="userDetailsService">  
        <ref bean="userManagerService"/>  
       </property>  
       <property name="passwordEncoder"><ref local="passwordEncoder"/></property>  
       <property name="saltSource">  
        <bean class="org.springframework.security.providers.dao.salt.ReflectionSaltSource">  
         <property name="userPropertyToUse">  
          <value>getUsername</value>  
         </property>  
        </bean>  
       </property>  
 </bean>  
   
     
      
    
      
      
 <bean id="httpSessionContextIntegrationFilter" class="com.ber.acegi.extend.BerHttpSessionContextIntegrationFilter">  
  <property name="loginFormUrl" value="/sof\_login.jsp"/>  
    
  <property name="noAuthenticationUrl">  
   <list>  
    <value>/j\_oa\_security\_check</value>  
    <value>/sof\_login.jsp</value>  
    <value>/sysmanage/ug/useradd.ao</value>  
   </list>  
  </property>  
 </bean>  
   
   
   <bean id="rememberMeServices" class="org.springframework.security.ui.rememberme.TokenBasedRememberMeServices">  
  <property name="userDetailsService" ref="userManagerService"/>  
  <property name="key" value="blhOaWebKey"/>  
  <property name="tokenValiditySeconds" value="864000"/>  
 </bean>  
     
 <bean id="rememberMeAuthenticationProvider" class="org.springframework.security.providers.rememberme.RememberMeAuthenticationProvider">  
  <property name="key" value="blhOaWebKey"/>  
 </bean>  
   
   
 <bean id="logoutFilter" class="org.springframework.security.ui.logout.LogoutFilter">  
    
  <constructor-arg value="/sof\_login.jsp"/>   
  <constructor-arg>  
   <list>  
    <ref bean="rememberMeServices"/>  
    <bean class="org.springframework.security.ui.logout.SecurityContextLogoutHandler"/>  
    </list>  
  </constructor-arg>  
 </bean>  
   
   
 <bean id="authenticationProcessingFilter" class="com.ber.acegi.extend.LogAuthenticationProcessingFilter">  
       <property name="authenticationManager" ref="authenticationManager"/>  
       <property name="authenticationFailureUrl" value="/sof\_login.jsp?login\_error=1"/>  
       <property name="defaultTargetUrl" value="/jsp/desktop/main.jsp"/>  
         
       
       
       <property name="filterProcessesUrl" value="/j\_oa\_security\_check"/>  
    </bean>  
    
     
    
    <bean id="filterInvocationInterceptor" class="org.springframework.security.intercept.web.FilterSecurityInterceptor">  
         <property name="authenticationManager"><ref bean="authenticationManager"/></property>  
       <property name="accessDecisionManager"><ref local="httpRequestAccessDecisionManager"/></property>  
       <property name="objectDefinitionSource"> <ref local="rdbmsFilterInvocationDefinitionSource" /></property>  
       <property name="observeOncePerRequest" value="false"></property>  
       <property name="alwaysReauthenticate" value="true"></property>  
    </bean>  
    <bean id="rdbmsFilterInvocationDefinitionSource"  class="com.ber.acegi.extend.RdbmsFilterInvocationDefinitionSource">  
    <constructor-arg type="org.springframework.security.util.UrlMatcher"  ref="antUrlPathMatcher" />  
    <property name="webresdbCache" ref="webresCacheBackend" />  
    <property name="rdbmsInvocationDefinition">  
     <bean class="com.ber.acegi.extend.RdbmsSecuredUrlDefinition">  
      <constructor-arg index="0">  
       <ref bean="dataSource"/>  
      </constructor-arg>  
      <constructor-arg index="1">  
       <value>  
      SELECT     MATCHURL\_ AS url, MENUCODE\_ AS role  
      FROM         T\_MENU\_RESOURCE  
      ORDER BY INDEX\_ DESC  
     </value>  
      </constructor-arg>  
      <property name="urlField" value="url"/>  
      <property name="rolesField" value="role"/>  
     </bean>  
    </property>  
    </bean>  
    <bean id="antUrlPathMatcher"  class="org.springframework.security.util.AntUrlPathMatcher" />   
    
    <bean id="webresCacheBackend"  class="org.springframework.cache.ehcache.EhCacheFactoryBean">  
       <property name="cacheManager">  
          <ref  bean="cacheManager"/>  
       </property>  
       <property name="cacheName">  
          <value>webresdbCache</value>  
       </property>  
    </bean>  
   
     
      
    <bean id="httpRequestAccessDecisionManager" class="org.springframework.security.vote.AffirmativeBased">  
      <property name="allowIfAllAbstainDecisions"><value>false</value></property>  
      <property name="decisionVoters">  
         <list>  
             <ref bean="roleVoter"/>  
         </list>  
      </property>  
   </bean>  
     
     
   <bean id="roleVoter" class="org.springframework.security.vote.RoleVoter">  
     <property name="rolePrefix"><value>AUTH\_</value></property>  
   </bean>  
     
 <bean id="exceptionTranslationFilter" class="org.springframework.security.ui.ExceptionTranslationFilter">  
  <property name="authenticationEntryPoint">  
   <ref bean="authenticationProcessingFilterEntryPoint"/>  
     
     
  </property>  
  <property name="accessDeniedHandler">  
   <bean class="org.springframework.security.ui.AccessDeniedHandlerImpl">  
    <property name="errorPage" value="/jsp/common/403.jsp"/>  
   </bean>  
  </property>  
   </bean>  
    
  <bean id="authenticationProcessingFilterEntryPoint" class="org.springframework.security.ui.webapp.AuthenticationProcessingFilterEntryPoint">  
    <property name="loginFormUrl" value="/sof\_login.jsp"/>  
    <property name="forceHttps" value="false"/>  
    <property name="serverSideRedirect" value="false"></property>  
 </bean>

</beans>

[http_www.springframework.org_schema_beans]: http://www.springframework.org/schema/beans
[http_www.w3.org_2001_XMLSchema-instance]: http://www.w3.org/2001/XMLSchema-instance
[http_www.springframework.org_schema_security]: http://www.springframework.org/schema/security
[http_www.springframework.org_schema_beans_spring-beans-2.0.xsd]: http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
[http_www.springframework.org_schema_security_spring-security-2.0.xsd]: http://www.springframework.org/schema/security/spring-security-2.0.xsd