[英]spring secuirty anonymous user and authenticated user with spring security
嗨,我是Spring Security的新手。
我曾嘗試與匿名用戶訪問該應用程序。 但是現在我想同時實現匿名用戶和經過身份驗證的用戶訪問該應用程序。任何人都可以幫助我。
我曾用於匿名用戶的以下security.xml,但現在我想實現匿名用戶和已認證的用戶。(已認證的用戶將示例注冊用戶的用戶名和密碼進行檢查)
<beans:beans xmlns="http://www.springframework.org/schema/security"
xmlns:beans="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">
<http pattern="/static/**" security="none" />
<http pattern="**/static/**" security="none" />
<http pattern="/w/login*" security="none" />
<http pattern="/w/about*" security="none" />
<http pattern="/w/getInvolved*" security="none" />
<http pattern="/w/faq*" security="none" />
<http pattern="/w/feedback*" security="none" />
<http pattern="/w/contact*" security="none" />
<http pattern="/w/privacy*" security="none" />
<http pattern="/w/terms*" security="none" />
<http auto-config='true' use-expressions="true">
<form-login login-page='/w/login' />
<intercept-url pattern="/w/**" access="isAnonymous()"/>
<intercept-url pattern="/a/**" access="isAnonymous()"/>
<logout logout-url="/w/logout" logout-success-url="/w/login" />
</http>
<authentication-manager>
<authentication-provider user-service-ref="twwiUserSQLMapDAO">
<password-encoder hash="sha"></password-encoder>
</authentication-provider>
</authentication-manager>
</beans:beans>
如果您想授予經過身份驗證的匿名用戶訪問權限,則可以使用permitAll:
<intercept-url pattern="/login/**" access="permitAll" />
聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.