Главная Обзор Помощь
Вход
chendeben
/
zheng
1
0
Ответвить 0
Файлы Задачи 0 Запросы на слияние 0 Вики
Просмотр исходного кода

增加spring security

shuzheng 9 лет назад
Родитель
282556a24a
Сommit
64241da952
16 измененных файлов с 115 добавлено и 32 удалено
Разделённый вид Показать статистику Diff
  1. 0 2
      cms/cms-web/src/main/java/com/zheng/cms/controller/ManageController.java
  2. 29 0
      cms/cms-web/src/main/resources/applicationContext-security.xml
  3. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/404.jsp
  4. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/500.jsp
  5. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/book/add.jsp
  6. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/book/list.jsp
  7. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/book/update.jsp
  8. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/hello/world.jsp
  9. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/index.jsp
  10. 14 0
      cms/cms-web/src/main/webapp/WEB-INF/jsp/manage/index.jsp
  11. 31 0
      cms/cms-web/src/main/webapp/WEB-INF/jsp/manage/login.jsp
  12. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/user/add.jsp
  13. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/user/list.jsp
  14. 3 3
      cms/cms-web/src/main/webapp/WEB-INF/jsp/user/update.jsp
  15. 10 0
      cms/cms-web/src/main/webapp/WEB-INF/web.xml
  16. 1 0
      common/src/main/resources/applicationContext-ehcache.xml

+ 0 - 2
cms/cms-web/src/main/java/com/zheng/cms/controller/ManageController.java
Просмотреть файл 

@@ -25,13 +25,11 @@ public class ManageController {
 
 	private static Logger _log = LoggerFactory.getLogger(ManageController.class);
 
 
 	@RequestMapping(value = {"", "/index"})
 
-	@ResponseBody
 
 	public Object index() {
 
 		return "/manage/index";
 
 	}
 
 
 	@RequestMapping("/login")
 
-	@ResponseBody
 
 	public Object login() {
 
 		return "/manage/login";
 
 	}

+ 29 - 0
cms/cms-web/src/main/resources/applicationContext-security.xml
Просмотреть файл 

@@ -0,0 +1,29 @@
 
+<beans:beans xmlns="http://www.springframework.org/schema/security"
 
+			 xmlns:beans="http://www.springframework.org/schema/beans"
 
+			 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 
+			 xsi:schemaLocation="http://www.springframework.org/schema/beans
 
+        http://www.springframework.org/schema/beans/spring-beans.xsd
 
+        http://www.springframework.org/schema/security
 
+        http://www.springframework.org/schema/security/spring-security.xsd">
 
+
 
+	<http use-expressions="false">
 
+		<!-- 登录页面不需要控制权限 -->
 
+		<intercept-url pattern="/manage/login" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
 
+		<!-- 访问其他所有页面都需要有USER权限 -->
 
+		<intercept-url pattern="/manage/**" access="ROLE_ADMIN" />
 
+		<!-- 登录功能 -->
 
+		<form-login login-page="/manage/login" authentication-failure-url="/manage/login?error"/>
 
+		<!-- 登出功能 -->
 
+		<logout />
 
+	</http>
 
+
 
+	<authentication-manager>
 
+		<authentication-provider>
 
+			<user-service>
 
+				<!-- 这里创建两个用户，可以通过用户名密码登录 -->
 
+				<user name="admin" password="123456" authorities="ROLE_ADMIN" />
 
+			</user-service>
 
+		</authentication-provider>
 
+	</authentication-manager>
 
+
 
+</beans:beans>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/404.jsp
Просмотреть файл 

@@ -2,10 +2,10 @@
 
 <%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c" %>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/fmt" prefix="fmt"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn"%>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 
+    <meta charset="utf-8"/>
 
 <title>404</title>
 
 </head>
 
 <body>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/500.jsp
Просмотреть файл 

@@ -3,10 +3,10 @@
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/fmt" prefix="fmt"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn"%>
 
 <fmt:setLocale value="zh_CN"/>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 
+	<meta charset="utf-8"/>
 
 <title>500</title>
 
 </head>
 
 <body>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/book/add.jsp
Просмотреть файл 

@@ -2,10 +2,10 @@
 
 <%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/fmt" prefix="fmt"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn"%>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 
+	<meta charset="utf-8"/>
 
 <link type="text/css" rel="stylesheet" href="${pageContext.request.contextPath}/resources/css/main.css?v=201509231"/>
 
 <title>添加书籍</title>
 
 </head>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/book/list.jsp
Просмотреть файл 

@@ -2,10 +2,10 @@
 
 <%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/fmt" prefix="fmt"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn"%>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 
+	<meta charset="utf-8"/>
 
 <link type="text/css" rel="stylesheet" href="${pageContext.request.contextPath}/resources/css/main.css?v=201509231"/>
 
 <title>书籍列表</title>
 
 </head>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/book/update.jsp
Просмотреть файл 

@@ -2,10 +2,10 @@
 
 <%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/fmt" prefix="fmt"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn"%>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 
+	<meta charset="utf-8"/>
 
 <link type="text/css" rel="stylesheet" href="${pageContext.request.contextPath}/resources/css/main.css?v=201509231"/>
 
 <title>修改书籍</title>
 
 </head>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/hello/world.jsp
Просмотреть файл 

@@ -2,10 +2,10 @@
 
 <%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/fmt" prefix="fmt"%>
 
 <%@ taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn"%>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 
+    <meta charset="utf-8"/>
 
 <title>你好世界！</title>
 
 </head>
 
 <body>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/index.jsp
Просмотреть файл 

@@ -1,9 +1,9 @@
 
 <%@ page contentType="text/html; charset=utf-8"%>
 
 <%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c"%>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-    <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 
+    <meta charset="utf-8"/>
 
     <title>首页</title>
 
 </head>
 
 <body>

+ 14 - 0
cms/cms-web/src/main/webapp/WEB-INF/jsp/manage/index.jsp
Просмотреть файл 

@@ -0,0 +1,14 @@
 
+<%@ page contentType="text/html; charset=utf-8"%>
 
+<%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c"%>
 
+<%@ taglib uri="http://java.sun.com/jsp/jstl/fmt" prefix="fmt"%>
 
+<%@ taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn"%>
 
+<!DOCTYPE html>
 
+<html>
 
+<head>
 
+    <meta charset="utf-8"/>
 
+    <title>后台首页</title>
 
+</head>
 
+<body>
 
+/manage/index
 
+</body>
 
+</html>

+ 31 - 0
cms/cms-web/src/main/webapp/WEB-INF/jsp/manage/login.jsp
Просмотреть файл 

@@ -0,0 +1,31 @@
 
+<%@ page contentType="text/html; charset=utf-8"%>
 
+<%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c"%>
 
+<%@ taglib uri="http://java.sun.com/jsp/jstl/fmt" prefix="fmt"%>
 
+<%@ taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn"%>
 
+<!DOCTYPE html>
 
+<html>
 
+<head>
 
+    <meta charset="utf-8"/>
 
+    <title>后台登录</title>
 
+</head>
 
+<body>
 
+<form method="post">
 
+    <c:if test="${param.error != null}">
 
+        <p>Invalid username and password.</p>
 
+    </c:if>
 
+    <c:if test="${param.logout != null}">
 
+        <p>You have been logged out.</p>
 
+    </c:if>
 
+    <p>
 
+        <label for="username">Username</label>
 
+        <input type="text" id="username" name="username" />
 
+    </p>
 
+    <p>
 
+        <label for="password">Password</label>
 
+        <input type="password" id="password" name="password" />
 
+    </p>
 
+    <input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}" />
 
+    <button type="submit" class="btn">Log in</button>
 
+</form>
 
+</body>
 
+</html>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/user/add.jsp
Просмотреть файл 

@@ -5,10 +5,10 @@
 
 <%@ taglib uri="http://www.springframework.org/tags" prefix="spring"%>
 
 <%@ taglib uri="http://www.springframework.org/tags/form" prefix="form"%>
 
 <c:set var="basePath" value="${pageContext.request.contextPath}"/>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 
+	<meta charset="utf-8"/>
 
 <title>添加用户</title>
 
 </head>
 
 <body>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/user/list.jsp
Просмотреть файл 

@@ -5,10 +5,10 @@
 
 <%@ taglib uri="http://www.springframework.org/tags" prefix="spring"%>
 
 <%@ taglib uri="http://www.springframework.org/tags/form" prefix="form"%>
 
 <c:set var="basePath" value="${pageContext.request.contextPath}"/>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 
+	<meta charset="utf-8"/>
 
 <title><spring:message code="user.list"/></title>
 
 </head>
 
 <body>

+ 3 - 3
cms/cms-web/src/main/webapp/WEB-INF/jsp/user/update.jsp
Просмотреть файл 

@@ -5,10 +5,10 @@
 
 <%@ taglib uri="http://www.springframework.org/tags" prefix="spring"%>
 
 <%@ taglib uri="http://www.springframework.org/tags/form" prefix="form"%>
 
 <c:set var="basePath" value="${pageContext.request.contextPath}"/>
 
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 
-<html xmlns="http://www.w3.org/1999/xhtml">
 
+<!DOCTYPE html>
 
+<html>
 
 <head>
 
-<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 
+	<meta charset="utf-8"/>
 
 <title>修改用户</title>
 
 </head>
 
 <body>

+ 10 - 0
cms/cms-web/src/main/webapp/WEB-INF/web.xml
Просмотреть файл 

@@ -52,6 +52,16 @@
 
 		<url-pattern>/</url-pattern>
 
 	</servlet-mapping>
 
 
+	<!-- Spring Security -->
 
+	<filter>
 
+		<filter-name>springSecurityFilterChain</filter-name>
 
+		<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
 
+	</filter>
 
+	<filter-mapping>
 
+		<filter-name>springSecurityFilterChain</filter-name>
 
+		<url-pattern>/*</url-pattern>
 
+	</filter-mapping>
 
+
 
 	<!-- Druid连接池监控页面 -->
 
 	<servlet>
 
 		<servlet-name>DruidStatView</servlet-name>

+ 1 - 0
common/src/main/resources/applicationContext-ehcache.xml
Просмотреть файл 

@@ -19,6 +19,7 @@
 
 	<!-- cache管理器配置 -->
 
 	<bean id="cacheManagerFactory" class="org.springframework.cache.ehcache.EhCacheManagerFactoryBean">
 
 		<property name="configLocation"  value="classpath:ehcache.xml"/>
 
+		<property name="shared" value="true" />
 
 	</bean>
 
 
 </beans>