如何使用Spring Security 4.0 + Spring 4.1和Hibernate 4.x在Jasypt 1.9.x中迁移spring-mvc应用程序

Question

当前，我的应用程序在jasypt 1.9.0，spring security 3.1.0和spring 3.1.2中，但是我想在jasypt 1.9.2，spring securiyt 4.0.0和spring 4.1.6中进行迁移。

迁移后，我无法登录应用程序。 j_spring_security_check始终始终调用access-denied-handler。

以下是pom.xml的快照

<properties>
        <java-version>1.8</java-version>
        <org.springframework-version>4.1.6.RELEASE</org.springframework-version>
        <org.springsecurity-version>4.0.0.RELEASE</org.springsecurity-version>
        <org.aspectj-version>1.8.6</org.aspectj-version>
        <jayspt-version>1.9.2</jayspt-version>
        <org.slf4j-version>1.6.4</org.slf4j-version>
        <logback.version>1.0.6</logback.version>
        <springframework-webflow-version>2.4.0.RELEASE</springframework-webflow-version>
    </properties>

login.jsp：

                <form name="f" action="<c:url value='login'/>"
                    method="post">
                    <fieldset id="user-details">
                        <label for="username">Username</label> <input type="text"
                            name="username" /> <label for="password">Password</label> <input
                            type="password" name="password" /> <input type="submit"
                            value="Sign In"  id="submit_first" name="submit_first"
                            class="submit" /> 

                            <input type="button" id="forgot" value="Forgot Password" onclick="callForgotPassword();" class="forgotpwd" />
                    </fieldset>
                </form>

security.xml ：（还原更改后）

<security:http use-expressions="true" auto-config="true">
        <security:intercept-url pattern="/css/*.css"
            access="permitAll" />
        <security:intercept-url pattern="/images/Wave2LogoLogin.png"
            access="permitAll" />
        <security:intercept-url pattern="/images/utlLogoHeader.png"
            access="permitAll" />
        <security:intercept-url pattern="/index.jsp"
            access="permitAll" />
        <security:intercept-url pattern="/public/*"
            access="permitAll" />
        <security:intercept-url pattern="/validate"
            access="permitAll" />
        <security:intercept-url pattern="/validateDate"
            access="permitAll" />
<security:intercept-url pattern="/**"
            access="isAuthenticated()" /> 
        <security:intercept-url pattern="/secure/**"
            access="isAuthenticated()" />
        <security:intercept-url pattern="/showNcprCheckPoint"
            access="isAuthenticated()" />
        <security:intercept-url pattern="/makeNcprCheckPoint"
            access="isAuthenticated()" />
        <security:intercept-url pattern="/chargingUrls"
            access="isAuthenticated()" />

        <security:access-denied-handler
            error-page="/WEB-INF/views/superadmin/superadminpanel.jsp" />
        <security:form-login login-page="/"
            authentication-success-handler-ref="successfulLoginService"
            authentication-failure-handler-ref="failedLoginService" />
        <security:session-management>
            <security:concurrency-control
                max-sessions="1" expired-url="/" />
        </security:session-management>

请帮忙。

Answer 1

终于找到了解决方案。 只需更改JSP文件中的访问权限，以及对spring-security.xml的相同更改，就可以看到登录页面。

感谢M.Deinum