Spring 安全管理手册

SpringSecuritySpringSecuritySpringSecurity0.0.2©[e-mail]30384902009-05-2613:41:40I.1.HelloWorld1.1.1.2.1.3.1.4.2.2.1.2.2.3.[2009/6/1717:55:04]SpringSecurity3.1.3.2.3.3.3.3.1.3.3.2.4.4.1.4.2.4.3.4.4.5.5.1.5.2.5.3.5.3.1.5.3.2.6.6.1.MD56.2.6.3.6.4.II.web7.7.1.HttpSessionContextIntegrationFilter7.2.LogoutFilter7.3.AuthenticationProcessingFilter7.4.DefaultLoginPageGeneratingFilter7.5.BasicProcessingFilter7.6.SecurityContextHolderAwareRequestFilter7.7.RememberMeProcessingFilter7.8.AnonymousProcessingFilter7.9.ExceptionTranslationFilter7.10.SessionFixationProtectionFilter7.11.FilterSecurityInterceptorIII.methodIV.ACLV.[2009/6/1717:55:04]SpringSecurityA.B.C.SpringSecurity-3.0.0.M1[2009/6/1717:55:04]SpringSecuritySpringSecurityOASpringSecuritySpring(Acegi)apachejsecurityjsecuritySpringSecurity(Acegi)SpringAcegiI“”II“web”url[2009/6/1717:55:36]III“method”IV“ACL”ACLAccessControlListV“”OA●●[e-mail]●QQ3038490SpringSecurityOA://://code.google.com/p/family168/downloads/detail?name=springsecurity-sample.rar&can=2&q=#makechangesOASpringSecurityI.[2009/6/1717:55:36]I.I.I.SpringSecuritySpringSecuritySpring.jar2MMaven2Maven2Maven2[INFO][dependency:tree][INFO]com.family168.springsecuritybook:ch01:war:0.1[INFO]\-org.springframework.security:spring-security-taglibs:jar:2.0.4:compile[INFO]+-org.springframework.security:spring-security-core:jar:2.0.4:compile[INFO]|+-org.springframework:spring-core:jar:2.0.8:compile[INFO]|+-org.springframework:spring-context:jar:2.0.8:compile[INFO]||\-aopalliance:aopalliance:jar:1.0:compile[INFO]|+-org.springframework:spring-aop:jar:2.0.8:compile[INFO]|+-org.springframework:spring-support:jar:2.0.8:runtime[INFO]|+-commons-logging:commons-logging:jar:1.1.1:compile[INFO]|+-commons-codec:commons-codec:jar:1.3:compile[INFO]|\-commons-collections:commons-collections:jar:3.2:compile[INFO]+-org.springframework.security:spring-security-acl:jar:2.0.4:compile[INFO]|\-org.springframework:spring-jdbc:jar:2.0.8:compile[INFO]|\-org.springframework:spring-dao:jar:2.0.8:compile[INFO]\-org.springframework:spring-web:jar:2.0.8:compile[INFO]\-org.springframework:spring-beans:jar:2.0.8:compile1HelloWorld[2009/6/1717:56:23]1HelloWorld1HelloWorldI.1HelloWorldSpringSecurityAcegi-1.x2.01.1.SpringSecurityweb.xmlfilterfilter-namespringSecurityFilterChain/filter-namefilter-classorg.springframework.web.filter.DelegatingFilterProxy/filter-class/filterfilter-mappingfilter-namespringSecurityFilterChain/filter-nameurl-pattern/*/url-pattern/filter-mappingSpringSecurity=1.0encoding=UTF-8?beans:beansxmlns=:beans=:xsi=:schemaLocation=://://://family168.com/oa/springsecurity/html/ch01-helloworld.html16[2009/6/1717:57:23]1HelloWorld='true'intercept-urlpattern=/admin.jspaccess=ROLE_ADMIN/intercept-urlpattern=/**access=ROLE_USER//httpauthentication-provideruser-serviceusername=adminpassword=adminauthorities=ROLE_USER,ROLE_ADMIN/username=userpassword=userauthorities=ROLE_USER//user-service/authentication-provider/beans:beansxmlSpringSecurityhttpauto-config='true'form,anonymous,rememberMeintercept-urlurlpatternurlurlintercepter-url/admin.jsp/**urlSpringSecurityurlintercepter-urlintercept-url/admin.jspintercept-urlintercept-urlSpringSecurityintercept-url/admin.jspROLE_ADMIN/admin.jspaccessROLE_SpringSecurityVoterSpringSecurityVoteruser-serviceadminuserSpringSecurityauthoritiesintercept-urladminROLE_ADMINROLE_USERadminROLE_ADMINROLE_USERuserROLE_USERROLE_USERROLE_ADMIN1.3.SpringSecuritySpringweb.xmlSpringweb.xml[2009/6/1717:57:23]1HelloWorld?xmlversion=1.0encoding=UTF-8?web-appversion=2.4xmlns=:xsi=:schemaLocation=://java.sun.com/xml/ns/j2ee/web-app_2_4.xsdconte