Intercept-url不起作用

Question

我成功地用Maven配置了Spring Secure， 但我的過濾器不起作用。 Spring允許所有人進入。我想禁用用戶配置文件子頁面。 用戶未簽名時，過濾器不會重定向到登錄頁面。

<beans:beans xmlns="http://www.springframework.org/schema/security" 
xmlns:beans="http://www.springframework.org/schema/beans" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:schemaLocation="http://www.springframework.org/schema/beans 
http://www.springframework.org/schema/beans/spring-beans-3.0.xsd 
http://www.springframework.org/schema/security 
http://www.springframework.org/schema/security/spring-security-3.0.3.xsd"> 

<http auto-config="true" use-expressions="true"> 
    <intercept-url pattern="/user-profile/**" access="hasRole('ROLE_USER')" /> 
</http> 

<beans:bean id="userDetailsService" class="com.walladverts.auth.HibernateUserDetailsService"> 
</beans:bean> 

<beans:bean id="daoAuthenticationProvider" 
    class="org.springframework.security.authentication.dao.DaoAuthenticationProvider"> 
    <beans:property name="userDetailsService" ref="userDetailsService" /> 
</beans:bean> 

<beans:bean id="authenticationManager" 
    class="org.springframework.security.authentication.ProviderManager"> 
    <beans:property name="providers"> 
     <beans:list> 
      <beans:ref local="daoAuthenticationProvider" /> 
     </beans:list> 
    </beans:property> 
</beans:bean> 


<authentication-manager> 
    <authentication-provider user-service-ref="userDetailsService"> 
    <password-encoder hash="sha"/> 
    </authentication-provider> 
</authentication-manager> 

Answer 1

用這種方式

<security:http auto-config="true" use-expressions="true"> 
    <security:intercept-url pattern="/user-profile/**" access="hasRole('ROLE_USER')" /> 
</security:http> 


<security:authentication-manager> 
    <security:authentication-provider user-service-ref="userDetailsService"> 
    <security:password-encoder hash="sha"/> 
    </security:authentication-provider> 
</security:authentication-manager> 

下面添加內容到您的web.xml

<!-- Enables Spring Security --> 
    <filter> 
     <filter-name>springSecurityFilterChain</filter-name> 
     <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> 
    </filter> 

    <filter-mapping> 
     <filter-name>lazyLoadingFilter</filter-name> 
     <url-pattern>/*</url-pattern> 
    </filter-mapping> 

    <filter-mapping> 
     <filter-name>springSecurityFilterChain</filter-name> 
     <url-pattern>/*</url-pattern> 
    </filter-mapping>