spring acegi 官方例子1

Mr.cai

acegi安全是一个强大的，灵活的安全解决方案的企业软件，并特别着重于应用，利用spring。用acegi安全，为用户的应用与全面的认证，授权，例如基于职务的访问控制，通道安全和人类用户检测能力。(google 对acegid的翻译)

参考资料：http://www.tfo-eservices.eu/wb_tutorials/media/SpringAcegiTutorial/HTML/SpringAcegiTutorial-1_1-html.html

里面有一个例子：SpringAcegiTutorial，可以进行下载，并运行，做为一个实例，已经相当不错了。

讲述了admin ,user的登录问题。及权限控件，acegi 的配置。

这个例子是spring mvc + spring acegi 的例子，阅读前最好有spring mvc 的基础。这里只摘录简单的配置说明。
<!--<br /> <br /> Code highlighting produced by Actipro CodeHighlighter (freeware)<br /> http://www.CodeHighlighter.com/<br /> <br /> --><!-- ****** START ACEGI Security Configuration *******-->

<!-- ======================== FILTER CHAIN ======================= -->



<!-- if you wish to use channel security, add "channelProcessingFilter," in front

of "httpsessionContextIntegrationFilter" in the list below -->

<bean id="filterChainProxy"

class="org.acegisecurity.util.FilterChainProxy">

<property name="filterInvocationDefinitionSource">

<value>

CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON

PATTERN_TYPE_APACHE_ANT

/**=httpSessionContextIntegrationFilter,formAuthenticationProcessingFilter,exceptionTranslationFilter,filterSecurityInterceptor

</value>

</property>

</bean>



<!-- Start Security filter config -->

<bean id="exceptionTranslationFilter"

class="org.acegisecurity.ui.ExceptionTranslationFilter">

<property name="authenticationEntryPoint">

<ref bean="formLoginAuthenticationEntryPoint" />

</property>

</bean>



<!-- Define filter to handle BASIC authentication -->

<bean id="basicProcessingFilter"

class="org.acegisecurity.ui.basicauth.BasicProcessingFilter">

<property name="authenticationManager">

<ref bean="authenticationManager" />

</property>

<property name="authenticationEntryPoint">

<ref bean="authenticationEntryPoint" />

</property>

</bean>



<!-- Define realm for BASIC login-->

<bean id="authenticationEntryPoint"

class="org.acegisecurity.ui.basicauth.BasicProcessingFilterEntryPoint">

<property name="realmName">

<value>Spring Web Realm</value>

</property>

</bean>



<!-- Define filter to handle FORM authentication -->

<bean id="formAuthenticationProcessingFilter"

class="org.acegisecurity.ui.webapp.AuthenticationProcessingFilter">

<property name="filterProcessesUrl">

<value>/j_acegi_security_check</value>

</property>

<property name="authenticationFailureUrl">

<value>/loginFailed.html</value>

</property>

<property name="defaultTargetUrl">

<value>/</value>

</property>

<property name="authenticationManager">

<ref bean="authenticationManager" />

</property>

</bean>



<!-- Define realm for FORM login-->

<bean id="formLoginAuthenticationEntryPoint"

class="org.acegisecurity.ui.webapp.AuthenticationProcessingFilterEntryPoint">

<property name="loginFormUrl">

<value>/login.jsp</value>

</property>

<property name="forceHttps">

<value>false</value>

</property>

</bean>



<bean id="httpSessionContextIntegrationFilter"

class="org.acegisecurity.context.HttpSessionContextIntegrationFilter">

</bean>

<!-- End Security filter config -->



<!-- Start Security interceptor config -->

<!-- Define authentication manager, decision manager and secure URL patterns -->

<bean id="filterSecurityInterceptor"

class="org.acegisecurity.intercept.web.FilterSecurityInterceptor">

<property name="authenticationManager">

<ref bean="authenticationManager" />

</property>

<property name="accessDecisionManager">

<ref bean="accessDecisionManager" />

</property>

<property name="objectDefinitionSource">

<value>

CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON

PATTERN_TYPE_APACHE_ANT

/secure/admin/*=ROLE_ADMIN

/secure/app/*=ROLE_USER

</value>

</property>

</bean>

<!-- End Security interceptor config -->

彬彬

菜刀吻电线

春节即将来到，我用祝福捻制成的绒线，烛光下为您织起一件红色的毛衣:前身是平安，后身是幸福，吉祥是厚厚的肩，如意戴在袖子里，领子蕴藏着体贴，口袋把快乐盛满，穿在身上让暖和包裹着您，让我的心陪伴您度过新年。

奇

爱咋咋地！

晃晃

无聊时可以刷屏幕 灌水 也可以试试 帖子的标题究竟可以写多长

tc

既来之，则看之！

菜刀吻电线

不错 非常经典  实用

C.R.CAN

你们都躲开，我来顶

晃晃

提醒猪猪，千万不能让你看见

奇

先顶上去，偶要高亮加精鸟！