Question

我试图关注this example关于Spring Security并根据我的需求调整它，但我的配置遇到了麻烦

我的LoginService看起来像这样：

// This example does not make sense of course but I'm just
// trying to make it work with @PreAuthorize("hasRole('ROLE_ADMIN')")
// and see an exception or something that lets me know that
// it is actually working ..

public class LoginService {

    private final static Logger LOGGER = Logger.getLogger(LoginService.class.getName());

    private AdministratorRepository administratorRepository;

    public LoginService(DSLContext ctx) {       
        this.administratorRepository = new AdministratorRepository(ctx);
    }

    @Transactional
    @PreAuthorize("hasRole('ROLE_ADMIN')")
    public void login(String userId, String password) {     
        LOGGER.debug("Login for " + userId);        
        this.administratorRepository.login(userId, password);   
    }

}

我已经在我的 applicationContext-jooq.xml 中开始了这个课程，如下所示：

<bean id="dataSource"
    class="org.springframework.jdbc.datasource.DriverManagerDataSource">
    <property name="driverClassName" value="org.postgresql.Driver" />
    <property name="url" value="jdbc:postgresql://localhost:5432/mz_db" />
    <property name="username" value="postgres" />
    <property name="password" value="1234" />
</bean>

<!-- Configure Spring's transaction manager to use a DataSource -->
<bean id="transactionManager"
    class="org.springframework.jdbc.datasource.DataSourceTransactionManager">
    <property name="dataSource" ref="dataSource" />
</bean>

<!-- Configure jOOQ's TransactionProvider as a proxy to Spring's transaction manager -->
<bean id="transactionProvider"
    class="com.mz.server.web.SpringTransactionProvider">
</bean>

<!-- Configure jOOQ's ConnectionProvider to use Spring's TransactionAwareDataSourceProxy,
     which can dynamically discover the transaction context -->
<bean id="transactionAwareDataSource"
    class="org.springframework.jdbc.datasource.TransactionAwareDataSourceProxy">
    <constructor-arg ref="dataSource" />
</bean>

<bean class="org.jooq.impl.DataSourceConnectionProvider" name="connectionProvider">
    <constructor-arg ref="transactionAwareDataSource" />
</bean>

<!-- Configure the DSL object, optionally overriding jOOQ Exceptions with Spring Exceptions -->
<bean id="dsl" class="org.jooq.impl.DefaultDSLContext">
    <constructor-arg ref="config" />
</bean>

<!-- Invoking an internal, package-private constructor for the example
     Implement your own Configuration for more reliable behaviour -->
<bean class="org.jooq.impl.DefaultConfiguration" name="config">
    <property name="SQLDialect"><value type="org.jooq.SQLDialect">POSTGRES_9_4</value></property>
    <property name="connectionProvider" ref="connectionProvider" />
    <property name="transactionProvider" ref="transactionProvider" />
</bean>

<!-- BEGIN Services -->

<bean id="loginService" class="com.mz.server.web.service.LoginService">
    <constructor-arg>
        <ref bean="dsl" />
    </constructor-arg>
</bean>

<!-- END Services -->

我的问题是我希望Spring安全管理loginService。这是我的 applicationContext-security.xml ：

<beans:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:beans="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.1.xsd
    http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-4.0.xsd">

    <global-method-security pre-post-annotations="enabled" secured-annotations="enabled" />

    <http auto-config="true" >
        <intercept-url pattern="/**" access="hasRole('ROLE_ADMIN')" />
    </http>

    <authentication-manager >
        <authentication-provider>
            <user-service>
                <user name="admin" password="admin" authorities="ROLE_ADMIN" />
            </user-service>
        </authentication-provider>
    </authentication-manager>

<!-- <beans:bean name="loginService" class="com.mz.server.web.service.LoginService"/> -->

</beans:beans>

如果我发表评论

<beans:bean name="loginService" class="com.mz.server.web.service.LoginService"/>

我收到的错误是没有默认构造函数 - 这是真的，因为此类 1。已经实例化并且 2。需要一个DSLContext对象作为构造函数参数。

如果我让它评论说没有任何反应。没有显示警告的例外。 @PreAuthorize似乎被忽略了..

如何解决此问题？

Answer 1

您可以将构造函数注入添加到LoginService的XML配置中。您是否也自动装配了DSLContext？

XML中的这一行正在调用默认构造函数：

<beans:bean name="loginService" class="com.mz.server.web.service.LoginService"/>

如果你想对DSLContext进行构造函数注入，它看起来像这样：

<bean name="loginService" class="com.mz.server.web.service.LoginService">
    <constructor-arg ref="dslContext"/>
</bean>

这假设bean工厂还有一个用于DSLContext的bean。

您也可以尝试使用所有注释或XML配置，但不能混合和匹配。

如何使用已在另一个.xml文件中配置的bean？

1 个答案: