SpringSecurity01(使用传统的xml方式开发,且不连接数据库)

摘要：创建一个工程在里面添加依赖，依赖不要随便改我改了出错了好几次都找不到原因可以轻松的将对象转换成对象和文档同样也可以将转换成对象和配置

1.创建一个web工程
2.在pom里面添加依赖，依赖不要随便改,我改了出错了好几次都找不到原因

    UTF-8
    1.7
    1.7
    2.5.0
    1.2
    3.0-alpha-1
  
  
    
    
      org.springframework
      spring-webmvc
      4.3.13.RELEASE
    
    
      org.springframework
      spring-web
      4.3.13.RELEASE
    
    
      org.springframework
      spring-context
      4.3.13.RELEASE
    
    
      org.springframework
      spring-beans
      4.3.13.RELEASE
    
    
      org.springframework
      spring-core
      4.3.13.RELEASE
    
    
    
      org.springframework.security
      spring-security-config
      4.2.3.RELEASE
    
    
      org.springframework.security
      spring-security-web
      4.2.3.RELEASE
    

    
    
    
      com.fasterxml.jackson.core
      jackson-core
      ${jacksonVersion}
    
    
      com.fasterxml.jackson.core
      jackson-annotations
      ${jacksonVersion}
    

    
      com.fasterxml.jackson.core
      jackson-databind
      ${jacksonVersion}
    
    
      org.codehaus.jackson
      jackson-mapper-asl
      1.9.13
    
    
      org.codehaus.jackson
      jackson-core-asl
      1.9.13
    

    
    
      jstl
      jstl
      ${jstlVersion}
    
    
      javax.servlet
      servlet-api
      ${servletVersion}
      provided
    
    
      javax.servlet.jsp
      jsp-api
      2.2
      provided
    
  

3.配置web.xml

  user-manager
  
    index.jsp
  

  
  
    contextConfigLocation
    
      classpath:applicationContext.xml
      classpath:springSecurity.xml
    
  
  
  
    org.springframework.web.context.ContextLoaderListener
  



  
  
    springSecurityFilterChain
    org.springframework.web.filter.DelegatingFilterProxy
  
  
    springSecurityFilterChain
    /*
  

  
  
    encodingFilter
    org.springframework.web.filter.CharacterEncodingFilter
    
      encoding
      UTF-8
    
    
      forceEncoding
      true
    
  
  
    encodingFilter
    /*
  
  
  
    spring
    org.springframework.web.servlet.DispatcherServlet
    
      contextConfigLocation
      
      classpath:springmvc.xml
    
    
    1
  
  
    spring
    /
  
  

4.配置applicationContext.xml

5.配置springmvc.xml

    
    

    
    
        
        
            
            
                
                    
                        text/plain;charset=utf-8
                        text/html;charset=UTF-8
                    
                
            
        
    
    
    



    
    
        
        
    
    
    
    
    
    
    
    
    
        
        
        
        
    

6.配置springSecurity.xml

7.自定义成功处理的拦截器 MyAuthenticationSuccessHandler

public class MyAuthenticationSuccessHandler implements AuthenticationSuccessHandler {
    private  final  static ObjectMapper objectMapper=new ObjectMapper();
    @Override
    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException {
        //这里是可以拿到用户对的登录名的
        String username = request.getParameter("username");
        System.out.println(username);
        response.setContentType("application/json;charset=utf-8");
        String successMessage = objectMapper.writeValueAsString(new JsonData(200, "登陆成功"));
        response.getWriter().print(successMessage);
    }
}

自定义失败处理器的拦截器

public class MyAuthenticationFailureHandler implements AuthenticationFailureHandler{
    private  final  static ObjectMapper objectMapper=new ObjectMapper();
    @Override
    public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response, AuthenticationException e) throws IOException, ServletException {
        //这里是可以拿到用户对的登录名的
        String username = request.getParameter("username");
        System.out.println(username);
        response.setContentType("application/json;charset=utf-8");
        String failureMessage = objectMapper.writeValueAsString(new JsonData(500, "登陆失败"));
        response.getWriter().print(failureMessage);
    }
}

自定义的authentication-provider下面的user-service
定义一个类,这个实现类就是用于封装数据库里面的用户的信息然后返回给springsecurity,它会比较从
表单穿过来的用户名和密码和数据库查出来的用户名和密码进行比对，这里写死，以后再加数据库

public class MyUserDetailService implements UserDetailsService {
    @Override
    public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
        //UserDetails：封装用户数据的接口,这里应该是数据库查询出来的数据,当返回这个user对象时,springsecurity会把输入的用户名和密码和这个对象里面的用户名和密码进行比对
        //成功则认证通过,失败则登陆失败
        User user=new User("jojo","123456", AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_USER"));
        return user;
    }
}

创建这个目录结构

示范

<%@ page contentType="text/html;charset=UTF-8" language="java" %>


    


商品添加页面

其它页面一样
index.jsp

<%@ page contentType="text/html;charset=UTF-8" language="java" %>


    


一下是网站的功能
商品添加
商品修改
商品查询
商品删除

login.jsp

<%@ page contentType="text/html;charset=UTF-8" language="java" %>


    



 用户名:

 密 码:

    

errorPage.jsp

<%@ page contentType="text/html;charset=UTF-8" language="java" %>


    


权限不足,请正确操作

controller

@Controller
public class MainController {
    /**
     *
     * @return登录页面
     */
    @RequestMapping("/userLogin")
    public String loginPage()
    {
        return "login";
    }

    /**
     *
     * @return登录页面
     */
    @RequestMapping("/error")
    public String errorPage()
    {
        return "errorPage";
    }
}

@Controller
@RequestMapping("product")
public class ProductController {


    /**
     * 商品添加
     */
    @RequestMapping("index")
    public String index()
    {
        return "index";
    }
    /**
     * 商品添加
     */
    @RequestMapping("add")
    public String add()
    {
        return "product/productAdd";
    }

    /**
     * 商品修改
     */
    @RequestMapping("update")
    public String update()
    {
        return "product/productUpdate";
    }
    /**
     * 商品列表
     */
    @RequestMapping("list")
    public String list()
    {
        return "product/productList";
    }
    /**
     * 商品删除
     */
    @RequestMapping("delete")
    public String delete()
    {
        return "product/productDelete";
    }
}

创建一个返回给前台的包装类，用于返回code和message

public class JsonData {

    private Integer code;

    private String message;


    public JsonData() {
    }


    public JsonData(Integer code, String message) {
        this.code = code;
        this.message = message;
    }

    public Integer getCode() {
        return code;
    }

    public void setCode(Integer code) {
        this.code = code;
    }

    public String getMessage() {
        return message;
    }

    public void setMessage(String message) {
        this.message = message;
    }
}