动态弹簧安全登录

时间:2015-04-27 12:28:14

标签: java spring tomcat java-ee spring-security

我有一个文件bean:

<beans:beans xmlns="http://www.springframework.org/schema/security"
xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans
      http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
      http://www.springframework.org/schema/security
      http://www.springframework.org/schema/security/spring-security-3.1.xsd">

<http auto-config="true">
  <intercept-url pattern="/secured/*" access="ROLE_USER" />
    <form-login login-processing-url="/login" login-page="/loginPage"
        username-parameter="username" password-parameter="password"
        default-target-url="/secured/mypage" authentication-failure-url="/loginPage?auth=fail" />
    <logout logout-url="/logout" logout-success-url="/logoutPage" />        
</http>

<authentication-manager>
    <authentication-provider>
        <user-service>
            <user name="srccodes" password="password" authorities="ROLE_USER" />
        </user-service>
    </authentication-provider>
</authentication-manager>

我有一个登录页面我从extern数据库检查登录密码,登录是“srccodes”密码=“密码”的难度。如何动态添加用户并对他产生影响,例如ROLE_USER

1 个答案:

答案 0 :(得分:0)

检查example 根据您的示例,您将密码和用户详细信息存储在xml中!它将从数据库tabke获得用户信任 1.您必须更改身份验证管理器的设置

<authentication-manager>
  <authentication-provider>
    <jdbc-user-service data-source-ref="dataSource"
      users-by-username-query=
        "select username,password, enabled from users where username=?"
      authorities-by-username-query=
        "select username, role from user_roles where username =?  " />
  </authentication-provider>
</authentication-manager>

并设置与数据库的连接

<bean id="dataSource"
    class="org.springframework.jdbc.datasource.DriverManagerDataSource">

    <property name="driverClassName" value="com.mysql.jdbc.Driver" />
    <property name="url" value="jdbc:mysql://localhost:3306/test" />
    <property name="username" value="root" />
    <property name="password" value="password" />
</bean>
  1. 如果您想创建用户,则必须将新记录插入

    users表和user_roles