SpringSecurity01(使用傳統(tǒng)的xml方式開發(fā),且不連接數(shù)據(jù)庫)

Gilbertat 發(fā)布于2019-08-19 10:16 / 1955人閱讀

摘要：創(chuàng)建一個工程在里面添加依賴，依賴不要隨便改我改了出錯了好幾次都找不到原因可以輕松的將對象轉(zhuǎn)換成對象和文檔同樣也可以將轉(zhuǎn)換成對象和配置

1.創(chuàng)建一個web工程
2.在pom里面添加依賴，依賴不要隨便改,我改了出錯了好幾次都找不到原因


    UTF-8
    1.7
    1.7
    2.5.0
    1.2
    3.0-alpha-1
  
  
    
    
      org.springframework
      spring-webmvc
      4.3.13.RELEASE
    
    
      org.springframework
      spring-web
      4.3.13.RELEASE
    
    
      org.springframework
      spring-context
      4.3.13.RELEASE
    
    
      org.springframework
      spring-beans
      4.3.13.RELEASE
    
    
      org.springframework
      spring-core
      4.3.13.RELEASE
    
    
    
      org.springframework.security
      spring-security-config
      4.2.3.RELEASE
    
    
      org.springframework.security
      spring-security-web
      4.2.3.RELEASE
    

    
    
    
      com.fasterxml.jackson.core
      jackson-core
      ${jacksonVersion}
    
    
      com.fasterxml.jackson.core
      jackson-annotations
      ${jacksonVersion}
    

    
      com.fasterxml.jackson.core
      jackson-databind
      ${jacksonVersion}
    
    
      org.codehaus.jackson
      jackson-mapper-asl
      1.9.13
    
    
      org.codehaus.jackson
      jackson-core-asl
      1.9.13
    

    
    
      jstl
      jstl
      ${jstlVersion}
    
    
      javax.servlet
      servlet-api
      ${servletVersion}
      provided
    
    
      javax.servlet.jsp
      jsp-api
      2.2
      provided

3.配置web.xml



  user-manager
  
    index.jsp
  

  
  
    contextConfigLocation
    
      classpath:applicationContext.xml
      classpath:springSecurity.xml
    
  
  
  
    org.springframework.web.context.ContextLoaderListener
  



  
  
    springSecurityFilterChain
    org.springframework.web.filter.DelegatingFilterProxy
  
  
    springSecurityFilterChain
    /*
  

  
  
    encodingFilter
    org.springframework.web.filter.CharacterEncodingFilter
    
      encoding
      UTF-8
    
    
      forceEncoding
      true
    
  
  
    encodingFilter
    /*
  
  
  
    spring
    org.springframework.web.servlet.DispatcherServlet
    
      contextConfigLocation
      
      classpath:springmvc.xml
    
    
    1
  
  
    spring
    /

4.配置applicationContext.xml

5.配置springmvc.xml



    
    

    
    
        
        
            
            
                
                    
                        text/plain;charset=utf-8
                        text/html;charset=UTF-8

6.配置springSecurity.xml

7.自定義成功處理的攔截器 MyAuthenticationSuccessHandler

public class MyAuthenticationSuccessHandler implements AuthenticationSuccessHandler {
    private  final  static ObjectMapper objectMapper=new ObjectMapper();
    @Override
    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException {
        //這里是可以拿到用戶對的登錄名的
        String username = request.getParameter("username");
        System.out.println(username);
        response.setContentType("application/json;charset=utf-8");
        String successMessage = objectMapper.writeValueAsString(new JsonData(200, "登陸成功"));
        response.getWriter().print(successMessage);
    }
}

自定義失敗處理器的攔截器

public class MyAuthenticationFailureHandler implements AuthenticationFailureHandler{
    private  final  static ObjectMapper objectMapper=new ObjectMapper();
    @Override
    public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response, AuthenticationException e) throws IOException, ServletException {
        //這里是可以拿到用戶對的登錄名的
        String username = request.getParameter("username");
        System.out.println(username);
        response.setContentType("application/json;charset=utf-8");
        String failureMessage = objectMapper.writeValueAsString(new JsonData(500, "登陸失敗"));
        response.getWriter().print(failureMessage);
    }
}

自定義的authentication-provider下面的user-service
定義一個類,這個實現(xiàn)類就是用于封裝數(shù)據(jù)庫里面的用戶的信息然后返回給springsecurity,它會比較從
表單穿過來的用戶名和密碼和數(shù)據(jù)庫查出來的用戶名和密碼進行比對，這里寫死，以后再加數(shù)據(jù)庫

public class MyUserDetailService implements UserDetailsService {
    @Override
    public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
        //UserDetails：封裝用戶數(shù)據(jù)的接口,這里應(yīng)該是數(shù)據(jù)庫查詢出來的數(shù)據(jù),當(dāng)返回這個user對象時,springsecurity會把輸入的用戶名和密碼和這個對象里面的用戶名和密碼進行比對
        //成功則認(rèn)證通過,失敗則登陸失敗
        User user=new User("jojo","123456", AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_USER"));
        return user;
    }
}

創(chuàng)建這個目錄結(jié)構(gòu)

示范

<%@ page contentType="text/html;charset=UTF-8" language="java" %>


    商品添加頁面


商品添加頁面

其它頁面一樣
index.jsp

<%@ page contentType="text/html;charset=UTF-8" language="java" %>


    首頁


一下是網(wǎng)站的功能
商品添加
商品修改
商品查詢
商品刪除

<%@ page contentType="text/html;charset=UTF-8" language="java" %>


    登錄頁面



 用戶名:

 密 碼:

errorPage.jsp

<%@ page contentType="text/html;charset=UTF-8" language="java" %>


    自定義錯誤頁面


權(quán)限不足,請正確操作

controller

@Controller
public class MainController {
    /**
     *
     * @return登錄頁面
     */
    @RequestMapping("/userLogin")
    public String loginPage()
    {
        return "login";
    }

    /**
     *
     * @return登錄頁面
     */
    @RequestMapping("/error")
    public String errorPage()
    {
        return "errorPage";
    }
}

@Controller
@RequestMapping("product")
public class ProductController {


    /**
     * 商品添加
     */
    @RequestMapping("index")
    public String index()
    {
        return "index";
    }
    /**
     * 商品添加
     */
    @RequestMapping("add")
    public String add()
    {
        return "product/productAdd";
    }

    /**
     * 商品修改
     */
    @RequestMapping("update")
    public String update()
    {
        return "product/productUpdate";
    }
    /**
     * 商品列表
     */
    @RequestMapping("list")
    public String list()
    {
        return "product/productList";
    }
    /**
     * 商品刪除
     */
    @RequestMapping("delete")
    public String delete()
    {
        return "product/productDelete";
    }
}

創(chuàng)建一個返回給前臺的包裝類，用于返回code和message

public class JsonData {

    private Integer code;

    private String message;


    public JsonData() {
    }


    public JsonData(Integer code, String message) {
        this.code = code;
        this.message = message;
    }

    public Integer getCode() {
        return code;
    }

    public void setCode(Integer code) {
        this.code = code;
    }

    public String getMessage() {
        return message;
    }

    public void setMessage(String message) {
        this.message = message;
    }
}