Spring Security中的Login Logout用例

Question

我正在嘗試使用Spring Security創建登錄用例（我在參考此示例）。

輸入用戶名和密碼后，如果單擊“ login按鈕，則要求輸入

j_spring_security_check.htm 

網址，並且獲取上述網址的HTTP狀態404。

我正在使用netbeans IDE。 我不知道哪里出了問題。 請幫忙。

這是web.xml的內容

<web-app version="3.0" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd">
    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>/WEB-INF/applicationContext.xml</param-value>
    </context-param>
    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
    <servlet>
        <servlet-name>dispatcher</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <load-on-startup>2</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>dispatcher</servlet-name>
        <url-pattern>*.htm</url-pattern>
    </servlet-mapping>

    <session-config>
        <session-timeout>
            30
        </session-timeout>
    </session-config>
    <welcome-file-list>
        <welcome-file>redirect.jsp</welcome-file>
    </welcome-file-list>
</web-app>

這是login.jsp登錄表單的代碼

<c:if test="${not empty error}">
                <div class="errorblock">
        Your login attempt was not successful, try again.<br /> Caused :
        ${sessionScope["SPRING_SECURITY_LAST_EXCEPTION"].message}
                </div>
</c:if>


            <form name='f' action="<c:url value='j_spring_security_check.htm' />" method="POST">

                <div style="margin-left: 27%">
                    <input type="text" name="j_username" value="" placeholder="Username" class="login_hint" id="username" title="Username" />
                    <br/>
                    <input type="password" name="j_password" value="" placeholder="Password" class="login_hint" id="password" title="Password" />
                    <br />
                    <input type ="submit" value ="Login" class ="btn btn-primary loginBtn"/>
                 </div>
            </form>

這是applicationContext-security.xml的內容

<beans:beans xmlns="http://www.springframework.org/schema/security"
        xmlns:beans="http://www.springframework.org/schema/beans" 
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://www.springframework.org/schema/beans
        http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
        http://www.springframework.org/schema/security
        http://www.springframework.org/schema/security/spring-security-3.0.3.xsd">

        <http auto-config="true">
                <intercept-url pattern="/admin*" access="ROLE_USER" />
                <form-login login-page="/login" default-target-url="/admin/home.htm"
                        authentication-failure-url="/loginfailed" />
                <logout logout-success-url="/logout" />
        </http>

        <authentication-manager>
          <authentication-provider>
                <user-service>
                        <user name="admin" password="root" authorities="ROLE_USER" />
                </user-service>
          </authentication-provider>
        </authentication-manager>

</beans:beans>

Answer 1

UsernamePasswordAuthenticationFilter攔截發送到/j_spring_security_check j_spring_security_check的記錄（默認情況下），因此很可能只需要從login.jsp的操作URL刪除.htm結尾：

<form name='f' action="<c:url value='j_spring_security_check'/>" method="POST">

哦，好了，看來web.xml也缺少一些東西。 您將需要設置安全過濾器鏈：

<filter>
    <filter-name>springSecurityFilterChain</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>

<filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

Answer 2

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">

  <display-name>Sample</display-name>
  <servlet>
    <servlet-name>appServlet</servlet-name>
    <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
    <init-param>
      <param-name>contextConfigLocation</param-name>
      <param-value>
                /WEB-INF/spring/appServlet/servlet-context.xml
            </param-value>
    </init-param>
    <load-on-startup>1</load-on-startup>
  </servlet>
  <servlet-mapping>
    <servlet-name>appServlet</servlet-name>
    <url-pattern>*.htm</url-pattern>
  </servlet-mapping>
  <context-param>
    <param-name>contextConfigLocation</param-name>
    <param-value>
            /WEB-INF/spring/root-context.xml,
            /WEB-INF/spring/spring-security.xml
            </param-value>
  </context-param>
  <listener>
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
  </listener>
  <filter>
    <filter-name>springSecurityFilterChain</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
  </filter>
  <filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>*</url-pattern>
  </filter-mapping>
  <welcome-file-list>
        <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>

</web-app>

只需提供servlet-網址映射為* .htm，過濾器映射網址格式為*

嘗試這個。 它會工作。 希望這可以幫助