spring security5.03配置说明.docVIP

spring-security-3.0.3. 与Spring3.0.3 集成配置配置说明 1. web.xml配置 ?xml version=1.0 encoding=UTF-8? web-app xmlns:xsi=/2001/XMLSchema-instance 03 xmlns=/xml/ns/javaee xmlns:web=/xml/ns/javaee/web-app_2_5.xsd 04 xsi:schemaLocation=/xml/ns/javaee /xml/ns/javaee/web-app_2_5.xsd 05 id=WebApp_ID version=2.5 display-namewebapp/display-name !-- spring start -- context-param param-namecontextConfigLocation/param-name param-value /WEB-INF/applicationContext-*.xml /param-value /context-param listener listener-class org.springframework.web.context.ContextLoaderListener /listener-class /listener !-- spring end -- !-- spring security start-- !-- spring security 过滤器授权代理，会产生一个过滤器链，来处理security中的过滤器 命名一定要是springSecurityFilterChain -- filter filter-namespringSecurityFilterChain/filter-name filter-class org.springframework.web.filter.DelegatingFilterProxy /filter-class /filter filter-mapping filter-namespringSecurityFilterChain/filter-name url-pattern/*/url-pattern /filter-mapping !-- 此监听器会在session创建和销毁的时候通知Spring Security 如果要限制用户登录个数，这里就要配置. -- listener listener-classorg.springframework.security.web.session.HttpSessionEventPublisher/listener-class /listener !-- spring security end -- welcome-file-list welcome-fileindex.jsp/welcome-file /welcome-file-list /web-app 说明：首选加载配置文件，然后添加spring 和spring security 监听器 添加spring security过滤器 这个过滤器要放到所有的过滤器之前 2. applicationContext-security.xml 配置 ?xml version=1.0 encoding=UTF-8? beans:beans xmlns=/schema/security xmlns:beans=/schema/beans xmlns:xsi=/2001/XMLSchema-instance xsi:schemaLocation=/schema/beans /schema/beans/spring-beans-3.0.xsd /schema/security /schema/security/spring-security-3.0.xsd !-- 表示是否启动AOP权限控制 也就是方法拦截器，这里暂时不需要 -- global-method-security pre-post-annotations=enabled !-- AspectJ pointcut expression that locates our post method and applies security that way protect-pointcut e