Question

在我的Spring 3 MVC应用程序中，用户需要保存密码，如果他们也能够在保存时确认密码，那将是一个很好的功能。

在bean中我使用基于注释的验证。是否有可用于执行此检查的注释验证器？

经过一些谷歌搜索后，我发现了这个博客：http://gochev.blogspot.com/2010/06/spring-mvc-spring-bean-validation.html。但我想我在这里缺少一个jar-lib，因为Eclipse无法找到/建议任何罐子。任何人都知道我需要什么罐子来工作？

提前致谢:)

Answer 1

我写了以下内容以验证密码：

约束实施：

 package com.test.web.validation.user;

import java.lang.annotation.Documented;
import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;

import javax.validation.Constraint;
import javax.validation.Payload;

@Target({ ElementType.TYPE })
@Retention(RetentionPolicy.RUNTIME)
@Documented
@Constraint(validatedBy = PasswordsEqualConstraintValidator.class)
public @interface PasswordsEqualConstraint {
String message();

Class<?>[] groups() default {};

Class<? extends Payload>[] payload() default {};
}

package com.test.web.validation.user;

import javax.validation.ConstraintValidator;
import javax.validation.ConstraintValidatorContext;

import com.test.logic.dto.UserDto;

public class PasswordsEqualConstraintValidator implements
    ConstraintValidator<PasswordsEqualConstraint, Object> {

@Override
public void initialize(PasswordsEqualConstraint arg0) {
}

@Override
public boolean isValid(Object candidate, ConstraintValidatorContext arg1) {
    UserDto user = (UserDto) candidate;
    return user.getPassword().equals(user.getPasswordRepeat());
}
}

我的DTO对象：

package com.test.logic.dto;

import java.io.Serializable;
import java.util.ArrayList;
import java.util.Date;
import java.util.List;

import javax.validation.constraints.NotNull;
import javax.validation.constraints.Size;

import com.esldic.web.validation.user.EmailExistsConstraint;
import com.esldic.web.validation.user.PasswordsEqualConstraint;

@PasswordsEqualConstraint(message = "passwords are not equal")
public final class UserDto extends AbstractDto implements Serializable {

private static final long serialVersionUID = 1L;

private Long id;

@NotNull
@Size(min = 3, max = 30)
@EmailExistsConstraint(message = "email is not available")
private String email;

private String username;

@NotNull
@Size(min = 2, max = 30)
private String password;

@NotNull
@Size(min = 2, max = 30)
private String passwordRepeat;
...
}

最后，我的控制器

package com.test.web.controllers;

import java.util.Set;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.validation.ConstraintViolation;
import javax.validation.Validator;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.ModelAttribute;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.ResponseBody;
import org.springframework.web.servlet.ModelAndView;

import com.test.logic.dto.UserDto;

@Controller
public final class SignupController {

@Autowired
private Validator validator;

@RequestMapping(value = "/signup.html", method = RequestMethod.POST)
public @ResponseBody
ModelAndView handleSignupForm(@ModelAttribute UserDto candidate,
        HttpServletResponse response) throws ServiceException {
    Set<ConstraintViolation<UserDto>> failures = validator
            .validate(candidate);

    if (!failures.isEmpty()) {
        response.setStatus(HttpServletResponse.SC_BAD_REQUEST);
        return ValidationHelper.validationMessages(failures);

    } else {
        return userService.create(candidate);
    }
}

此外，在Google中，您会发现许多使用JSR-303 bean验证的示例。

Answer 2

您需要Hibernate验证和JSR 303 Api jar。

    <dependency>
        <groupId>org.hibernate</groupId>
        <artifactId>hibernate-validator</artifactId>
        <version>4.1.0.Final</version>                        
    </dependency>
    <dependency>
        <groupId>javax.validation</groupId>
        <artifactId>validation-api</artifactId>
        <version>1.0.0.GA</version>
    </dependency>

请参阅此问题：Cross field validation with Hibernate Validator (JSR 303)

有几种方法可以解决这个问题。

Answer 3

Cyril Deba给出的接受的解决方案也为我工作。但后来我不得不为ResetPassword和ChangePassword Page制作另一个注释，因为它们有不同的DTO。为了克服这一点，我将isValid更改为以下代码。虽然它也可以通过实现一个接口来实现，但我认为这个更现实。希望它会有所帮助。

@Override
public boolean isValid(Object candidate, ConstraintValidatorContext context) {

    try {
        Method methodGetPassword = candidate.getClass().getMethod("getPassword");
        Method methodGetConfirmpassword = candidate.getClass().getMethod("getConfirmpassword");

        if(methodGetPassword.invoke(candidate) == null && methodGetConfirmpassword.invoke(candidate)==null) 
            return true;
        else if(methodGetPassword.invoke(candidate) == null )
            return false;
        return methodGetPassword.invoke(candidate).equals(methodGetConfirmpassword.invoke(candidate));

    } catch (NoSuchMethodException ex) {
        ex.printStackTrace();
        return false;
    } catch (Exception ex) {
        ex.printStackTrace();
        return false;
    }
}

Spring 3基于注释的验证：密码和确认密码

3 个答案: