Question

我正在尝试在我的简单应用上配置spring security，但我一直收到此错误。

Caused by: java.lang.IllegalArgumentException: A universal match pattern ('/**') is defined  before other patterns in the filter chain, causing them to be ignored. Please check the ordering in your <security:http> namespace or FilterChainProxy bean configuration

我见过其他类似帖子，但无法弄清楚为什么我会收到此错误。我似乎没有重复的安全性：http命名空间配置。

这是我的web.xml

<web-app xmlns="http://java.sun.com/xml/ns/j2ee"
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
     version="2.4">

<display-name>sampler</display-name>

<context-param>
    <param-name>contextConfigLocation</param-name>
    <param-value>
        classpath:**/sampler-context.xml
        classpath:**/sampler-security.xml
    </param-value>
</context-param>

<listener>
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
</listener>

<servlet>
    <servlet-name>sampler</servlet-name>
    <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
</servlet>
<servlet-mapping>
    <servlet-name>sampler</servlet-name>
    <url-pattern>/</url-pattern>
</servlet-mapping>

<filter>
    <filter-name>springSecurityFilterChain</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>
<filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

spring security config：

<beans:beans xmlns="http://www.springframework.org/schema/security"
         xmlns:beans="http://www.springframework.org/schema/beans"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://www.springframework.org/schema/beans
       http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
       http://www.springframework.org/schema/security
       http://www.springframework.org/schema/security/spring-security-3.1.xsd">

<!-- Add Authentication Manager -->
<authentication-manager>
    <authentication-provider>
        <user-service>
            <user name="admin" authorities="ROLE_USER" password="test"/>
        </user-service>
    </authentication-provider>
</authentication-manager>

<!-- This would add login screen -->
<http auto-config="true">
    <intercept-url pattern="/admin/*" access="ROLE_USER"/>
</http>

它只是一个我想提供的简单登录功能。对此问题的任何帮助都将非常感激。

Answer 1

问题在于context-param中的classpath的正则表达式。

<param-value>
    classpath:**/sampler-context.xml
    classpath:**/sampler-security.xml
</param-value>

将其更改为

    <param-value>
        classpath*:sampler-context.xml
        classpath*:sampler-security.xml
    </param-value>

解决了这个问题。

Spring安全性：通用匹配模式（'/ **'）在过滤器链中的其他模式之前定义，导致它们被忽略。

1 个答案: