Question

我需要将Spring Security与自定义登录页面和数据库连接添加到我的Spring MVC项目中。我收到以下错误消息，根据其他问题的答案，我试图更改代码，例如我将我的Spring Security Schema版本更改为4.0但代码返回以下错误：

将架构更改为4.0

http://www.springframework.org/schema/security/spring-security-4.0.xsd

错误

Cannot initialize context because there is already a root application context 
present - check whether you have multiple ContextLoader* definitions in your 
web.xml!

我的代码

我-security.xml文件

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns='http://www.springframework.org/schema/security'
    xmlns:beans='http://www.springframework.org/schema/beans' xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance'
    xsi:schemaLocation='http://www.springframework.org/schema/beans 
    http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
    http://www.springframework.org/schema/security
    http://www.springframework.org/schema/security/spring-security-3.2.xsd'>

    <beans:import resource="security-db.xml" />

    <http auto-config="true" access-denied-page="/notFound.jsp"
        use-expressions="true">
        <intercept-url pattern="/" access="permitAll" />
    </http>
</beans:beans>

的web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
          http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
    version="3.0">
    <listener>
        <listener-class>org.apache.tiles.extras.complete.CompleteAutoloadTilesListener</listener-class>
    </listener>
    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
    <servlet>
        <servlet-name>my</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>my</servlet-name>
        <url-pattern>/</url-pattern>
    </servlet-mapping>

    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>/WEB-INF/config/my-security.xml
        </param-value>
    </context-param>

</web-app>

安全-db.xml

<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans
    http://www.springframework.org/schema/beans/spring-beans-3.1.xsd">

    <bean id="dataSource"
        class="org.springframework.jdbc.datasource.DriverManagerDataSource">
        <property name="driverClassName" value="com.mysql.jdbc.Driver" />
        <property name="url" value="jdbc:mysql://localhost/dbproj" />
        <property name="username" value="jack" />
        <property name="password" value="jack" />
    </bean>
</beans>

Answer 1

我认为您只需要一个xml配置文件（my-servlet.xml，因为 servlet名称是“my”所以文件名必须是“ my-servlet.xml “）在web-xml中，然后引用该文件中的其他人。请参阅下面的xmls。

<xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
          http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
    version="3.0">
    <listener>
        <listener-class>org.apache.tiles.extras.complete.CompleteAutoloadTilesListener</listener-class>
    </listener>
    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
        <servlet>
            <servlet-name>my</servlet-name>
            <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
            <init-param>
                <param-name>contextConfigLocation</param-name>
                <param-value>/WEB-INF/my-servlet.xml</param-value>
            </init-param>
            <load-on-startup>1</load-on-startup>
    </servlet>

</web-app>

在my-servlet.xml文件中，您可以使用import来组成其他XML配置。

<beans>
  <bean id="bean1" class="..."/>
  <bean id="bean2" class="..."/>

  <import resource="security-db.xml"/>
  <import resource="foo-db.xml"/>
</beans>

Answer 2

将$password = 'passwod'; $outfile = 'download.zip'; $infile = 'pic1.jpg'; header("Content-type: application/octet-stream"); header("Content-disposition: attachment; filename=$outfile"); @system("zip -P $password $outfile $infile"); readfile($outfile); @unlink($outfile);添加到您的web.xml：

DelegatingFilterProxy

将<?xml version="1.0" encoding="UTF-8"?> <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd" version="3.1"> <filter> <filter-name>springSecurityFilterChain</filter-name> <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> </filter> <filter-mapping> <filter-name>springSecurityFilterChain</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <listener> <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> </listener> <servlet> <servlet-name>my</servlet-name> <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> <load-on-startup>1</load-on-startup> </servlet> <servlet-mapping> <servlet-name>my</servlet-name> <url-pattern>/</url-pattern> </servlet-mapping> <context-param> <param-name>contextConfigLocation</param-name> <param-value>classpath:config/security-config.xml</param-value> </context-param> </web-app>添加为my-servlet.xml的Web应用程序上下文配置。将/webapp/WEB-INF/元素添加到authentication-manager：

my-security.xml

摆脱<?xml version="1.0" encoding="UTF-8"?> <beans:beans xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.springframework.org/schema/security" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd"> <beans:import resource="spring-db.xml" /> <http auto-config="true" use-expressions="true"> <intercept-url pattern="/" access="permitAll" /> </http> <authentication-manager> <authentication-provider> <user-service> <user name="username" authorities="ROLE_ADMIN" password="password" /> </user-service> </authentication-provider> </authentication-manager> </beans:beans>并使用access-denied-page作为Mkyong did it here

java.lang.IllegalStateException：BeanFactory未初始化或已经关闭 - 在通过ApplicationContext访问bean之前调用'refresh'

2 个答案: