jersey 2.2和Spring Security 3依赖？

Question

我有一个使用Jersey 2.2实现的REST服务，并希望保护它。 在没有任何重大问题的情况下，我为Apache Shiro提供了支持。 现在，我想用Spring Security 3对同一件事（基本的http安全性）进行原型设计。

问题是我真的迷失了混合两个框架所需的依赖关系。 （球衣2.2没有弹力球衣）。

因此，如果有人能够指出一个工作样本，说明在maven项目中任何类型的spring-sec3 / jersey2.2集成，我真的很感激。

谢谢你的提前

Answer 1

自问题发布以来，我终于在一个应用程序中成功完成了工作：

• 球衣2.2
• 春季3.1
• guice 3.0

maven pom.xml文件中的相关属性和依赖项部分：

<properties>
  <spring.version>3.1.0.RELEASE</spring.version>
  <jersey.version>2.2</jersey.version>
  <guice.version>3.0</guice.version>
  <hk2.version>2.2.0-b14</hk2.version>
 </properties>

<dependencies>
 <dependency>
   <groupId>org.glassfish.jersey.containers</groupId>
   <artifactId>jersey-container-servlet</artifactId>
   <version>${jersey.version}</version>
 </dependency>
 <dependency>
  <groupId>org.glassfish.jersey.core</groupId>
  <artifactId>jersey-client</artifactId>
  <version>${jersey.version}</version>
 </dependency>
 <dependency>
  <groupId>org.codehaus.jackson</groupId>
  <artifactId>jackson-mapper-asl</artifactId>
  <version>1.9.12</version>
 </dependency>
 <dependency>
  <groupId>com.fasterxml.jackson.jaxrs</groupId>
  <artifactId>jackson-jaxrs-json-provider</artifactId>
  <version>2.2.1</version>
 </dependency>
 <dependency>
  <groupId>com.google.inject.extensions</groupId>
  <artifactId>guice-servlet</artifactId>
  <version>${guice.version}</version>
</dependency>
<dependency>
  <groupId>org.glassfish.hk2</groupId>
  <artifactId>guice-bridge</artifactId>
  <version>${hk2.version}</version>
</dependency>
<!-- SECURITY (start) -->
<dependency>
  <groupId>org.springframework.security</groupId>
  <artifactId>spring-security-core</artifactId>
  <version>${spring.version}</version>
</dependency>
<dependency>
  <groupId>org.springframework.security</groupId>
  <artifactId>spring-security-config</artifactId>
  <version>${spring.version}</version>
</dependency>
<dependency>
 <groupId>org.springframework.security</groupId>
 <artifactId>spring-security-web</artifactId>
 <version>${spring.version}</version>
</dependency>
<dependency>
  <groupId>org.springframework.security</groupId>
  <artifactId>spring-security-ldap</artifactId>
  <version>${spring.version}</version>
</dependency>
</dependencies>

现在在web.xml文件中，您需要处理过滤器顺序，以便在spring和guice之间进行和平交互：

<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns   /javaee/web-app_2_5.xsd">

<!-- Filter to secure Jersey (JAX-RS) services -->
<context-param>
    <param-name>contextConfigLocation</param-name>
    <param-value>/WEB-INF/applicationContext-security.xml</param-value>
</context-param>

<listener>
   <listener-class>org.springframework.web.context.ContextLoaderListener</listener-  class>
</listener>    

<!-- fist arm the spring security filters --->
<filter>
  <filter-name>springSecurityFilterChain</filter-name>
  <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>
<filter-mapping>
  <filter-name>springSecurityFilterChain</filter-name>
  <url-pattern>/*</url-pattern>
</filter-mapping> 

<!-- then filter all URLs through Guice Servlet -->
<filter>
  <filter-name>guiceFilter</filter-name>
  <filter-class>com.google.inject.servlet.GuiceFilter</filter-class>
</filter>
<filter-mapping>
   <filter-name>guiceFilter</filter-name>
   <url-pattern>/*</url-pattern>
</filter-mapping>
<listener>
    <listener-class>org.whatever.myapp.inject.GuiceServletConfig</listener-class>
</listener>

<!-- finaly define our rest app mapping -->
<servlet>
    <servlet-name>JerseyServletContainer</servlet-name>
    <servlet-class>org.glassfish.jersey.servlet.ServletContainer</servlet-class>
<init-param>
     <!-- Jersey would scan the specified package and register available    resources -->
          <param-name>jersey.config.server.provider.packages</param-name>
          <param-value>org.whatever.myapp.interfaces</param-value>
    </init-param>
    <init-param>
            <param-name>javax.ws.rs.Application</param-name>
    <param-value>org.whatever.myapp.inject.CurrentResourceConfig</param-value>
     </init-param>
     <load-on-startup>1</load-on-startup>
</servlet>

 <servlet-mapping>
    <servlet-name>JerseyServletContainer</servlet-name>
    <url-pattern>/webapi/*</url-pattern>
 </servlet-mapping>

 </web-app>

请注意，如果你希望在guice和hk2注射器之间有共同居住，你需要： - 注意你正在使用的hk2版本（pom.xml中的那个） - 注意避免使用guice在Guice类之外的注入注释，使用guice类之外的javax标准。

最后，您需要使用以下代码从hk2引导guice：

package org.whatever.myapp.inject.CurrentResourceConfig;

public class CurrentResourceConfig extends ResourceConfig
 {
  @Inject
  public CurrentResourceConfig(ServiceLocator serviceLocator)
  {
      GuiceBridge.getGuiceBridge().initializeGuiceBridge(serviceLocator);
      GuiceIntoHK2Bridge guiceBridge = serviceLocator.getService(GuiceIntoHK2Bridge.class);
      guiceBridge.bridgeGuiceInjector(GuiceServletConfig.getInjectorInstance());
   }
  }
}