在Spring MVC應用程序中啓用Spring Security

我試圖在Spring應用程序中啓用Spring Security 2.5，但遇到了配置問題。我已經按照幾個例子做了他們正在做的事情，但我認爲我配置的其他東西導致了問題。在Spring MVC應用程序中啓用Spring Security

這裏是我的web.xml：

<?xml version="1.0" encoding="UTF-8"?> 
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" 
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" 
id="WebApp_ID" version="2.5"> 
<display-name>onBoardingUI</display-name> 


<listener> 
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> 
</listener> 

<context-param> 
    <param-name>contextConfigLocation</param-name> 
    <param-value> 
     /WEB-INF/security-context.xml 
    </param-value> 
</context-param> 

<!-- Enables Spring security --> 
<filter> 
    <filter-name>springSecurityFilterChain</filter-name> 
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> 
</filter> 

<filter-mapping> 
    <filter-name>springSecurityFilterChain</filter-name> 
    <url-pattern>/*</url-pattern> 
</filter-mapping> 

<listener> 
    <listener-class>org.apache.commons.fileupload.servlet.FileCleanerCleanup</listener-class> 
</listener> 

<servlet> 
    <servlet-name>testUI</servlet-name> 
    <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> 
    <load-on-startup>1</load-on-startup> 
</servlet> 

<servlet-mapping> 
    <servlet-name>testUI</servlet-name> 
    <url-pattern>*.html</url-pattern> 
</servlet-mapping> 

<servlet-mapping> 
    <servlet-name>testUI</servlet-name> 
    <url-pattern>*.form</url-pattern> 
</servlet-mapping> 

<welcome-file-list> 
    <welcome-file>index.jsp</welcome-file> 
</welcome-file-list> 

<jsp-config> 
    <taglib> 
     <taglib-uri>/spring</taglib-uri> 
     <taglib-location>/WEB-INF/tld/spring-form.tld</taglib-location> 
    </taglib> 
</jsp-config>

，這裏是我的安全context.xml的

<?xml version="1.0" encoding="UTF-8"?> 
<beans xmlns="http://www.springframework.org/schema/beans" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"  
    xmlns:security="http://www.springframework.org/schema/security" 
xsi:schemaLocation="http://www.springframework.org/schema/beans 
         http://www.springframework.org/schema/beans/spring-beans-2.5.xsd 
         http://www.springframework.org/schema/security 
         http://www.springframework.org/schema/security/spring-security-2.0.xsd"> 

<security:global-method-security 
    secured-annotations="enabled" /> 

<security:http auto-config="true"> 
    <!-- Restrict URLs based on role --> 
    <security:intercept-url pattern="/login*" 
     access="IS_AUTHENTICATED_ANONYMOUSLY" /> 
    <security:intercept-url pattern="/logoutSuccess*" 
     access="IS_AUTHENTICATED_ANONYMOUSLY" /> 

    <security:intercept-url pattern="/css/main.css" 
     access="IS_AUTHENTICATED_ANONYMOUSLY" /> 

    <security:intercept-url pattern="/**" access="ROLE_USER" /> 

    <!-- Override default login and logout pages --> 
    <security:form-login login-page="/login.html" 
     login-processing-url="/login.html" default-target-url="/index.jsp" 
     authentication-failure-url="/login.jsp?login_error=1" /> 
    <security:logout logout-url="/logout" 
     logout-success-url="/login.html" /> 
</security:http> 

<security:authentication-provider> 
    <security:jdbc-user-service 
     data-source-ref="dataSource" /> 


</security:authentication-provider>

戰爭部署失敗，這是所有在日誌中：

Feb 16, 2010 11:46:29 AM org.apache.catalina.core.StandardContext start 
SEVERE: Error listenerStart

這顯然是導致我的聽衆失敗的原因，但我不知道爲什麼。

這是使用Spring Security 2.5部署到Tomcat 6.0.20和Spring MVC 2.5。

來源

2010-02-16 Casey

尋找其他日誌文件的實際堆棧跟蹤（標準輸出* .LOG，標準錯誤* .LOG，本地主機* .LOG） – axtavt

呀如上面說應該有更多可用的日誌記錄信息。你有沒有爲你的webapp配置log4j或其他東西？嘗試爲org.springframework設置DEBUG日誌閾值並將所有內容轉儲到控制檯。此外（儘管這可能不是破壞事物），但您正在使用2.0 spring安全XSD。 –

難道你的'datasource'bean沒有在security-context.xml文件中定義？

還要檢查security-context.xml是否在WAR內的正確位置 - 根據你的web.xml應該在/WEB-INF/security-context.xml - 檢查tomcat中的爆炸目錄爲看看它是否確實存在。

HTH

來源

2010-03-03 09:28:20 simonlord

<servlet> 
    <servlet-name>testUI</servlet-name> 
    <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> 
    <init-param> 
     <param-name>contextConfigLocation</param-name> 
     <param-value></param-value> 
    </init-param> 
    <load-on-startup>1</load-on-startup> 
</servlet>

來源

2010-07-02 13:27:22

在Spring MVC應用程序中啓用Spring Security

回答

相關問題