如何在spring security xml config中添加默认的admin用户?

时间:2015-05-27 11:07:46

标签: java spring authentication spring-security

我正在尝试在Spring Security 3 xml配置中添加默认管理员用户,我尝试了这个!但它说Bad credentials

Spring-security xml config:

        

    <security:form-login login-page="/login.xhtml"
        default-target-url="/dashboard.xhtml" authentication-failure-url="/login.xhtml?incorrect=true" />
    <!-- authentication-failure-url="/login.xhtml?failed=true" -->
    <security:logout logout-url="/logout" delete-cookies="true"
        logout-success-url="/login.xhtml" />


</security:http>

<bean id="userDao" class="com.tds.erp.dao.impl.UserDaoImpl"
    autowire="default" />

<bean id="userDetailsService" class="com.tds.erp.services.impl.UserDetailServiceImpl">
    <property name="userDao" ref="userDao"></property>
</bean>

<bean id="daoAuthenticationProvider"
    class="org.springframework.security.authentication.dao.DaoAuthenticationProvider">
    <property name="userDetailsService" ref="userDetailsService"></property>

</bean>

<bean id="authenticationManager"
    class="org.springframework.security.authentication.ProviderManager">
    <constructor-arg ref="daoAuthenticationProvider" />

</bean>

<security:authentication-manager>
    <security:authentication-provider
        user-service-ref="userDetailsService">
        <security:password-encoder hash="bcrypt" />
    </security:authentication-provider>

    <security:authentication-provider>
        <security:user-service>
            <security:user name="admin" password="admin"
                authorities="ROLE_USER, ROLE_ADMIN, ROLE_RH, ROLE_MANAGER" />
        </security:user-service>
    </security:authentication-provider>

</security:authentication-manager>

那么问题是什么,我该如何解决呢?

==&GT;编辑&lt; ==

我正在使用

  • Spring security 3.2.7
  • Spring 3.2.5
  • Spring IDE STS 3.6.3

在我的配置中,我在名称空间中出现此警告:

  

Class&#39; org.springframework.security.core.authority.AuthorityUtils&#39;是   抽象

在这一行:

http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.2.xsd"

如果我删除它:

 <security:authentication-provider>
        <security:user-service>
            <security:user name="admin" password="admin"
                authorities="ROLE_USER, ROLE_ADMIN, ROLE_RH, ROLE_MANAGER" />
        </security:user-service>
    </security:authentication-provider>

警告消失!!

我该如何解决这个问题?

0 个答案:

没有答案