spring登录-谁用过j_spring_security_check

[Even713]

由于什么都不懂，所以标题起得有点怪，提问题也会比较费解，麻烦大家看一下。
系统的登录好像用了spring的security检验：
<security:form-login login-page="/login" authentication-failure-url="/login?error=1" default-target-url="/index.html" />
我现在想知道登录时是如何检查用户名和密码的？通过什么样的controller还是经过了什么配置？

或者谁知道的话能不能大体说下他的工作流程和机制？
或者告诉我这玩意儿叫啥？我现在搜j_spring_security_check结果不多

[qiuge_alex]

应该是一个写好的jar文件spring-orm-2.5.6.jar 我也刚刚接触springside 还不是很熟悉 只能回答这些，希望能帮助你

[安心逍遥]

没弄过，帮顶了啊。祝楼主好运

[FexDeveloper]

这里用到的是spring security安全机制！
<!-- login-page 登录页面 -->
<!-- default-target-url 登录成功后跳转的URL -->
<!-- login-processing-url 配置验证过滤器的URL-->
<!-- always-use-default-target 是否登录后必须访问default-target-url -->
<!-- authentication-failure-url 登录失败后跳转的URL -->
<sec:form-login login-page="/back/login.jsp" login-processing url="/back/loginVerify" default-target-url="/back/sussce.jsp"
authentication-failure-url="/back/login!login.action" always-use-default-target="true" />

web.xml
<filter>
<filter-name>springSecurityFilterChain</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>
<filter-mapping>
<filter-name>springSecurityFilterChain</filter-name>
<url-pattern>/back/loginVerify</url-pattern>
</filter-mapping>

[qianyecq]

http://fansofjava.iteye.com/blog/593624
这里说得很清楚。

[「已注销」]

给你贴个配置文件吧：

<?xml version="1.0" encoding="UTF-8"?>



<beans:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:beans="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
                        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd">

	<global-method-security secured-annotations="enabled">
	</global-method-security>

    <http auto-config="true">
		<intercept-url pattern="/login.jsp*" filters="none"/>
		<intercept-url pattern="/common/pages/**" access="IS_AUTHENTICATED_REMEMBERED" />
		<intercept-url pattern="/common/**" filters="none" />
        <intercept-url pattern="/secure/extreme/**" access="ROLE_SUPERVISOR"/>
        <intercept-url pattern="/secure/**" access="IS_AUTHENTICATED_REMEMBERED" />
        <!-- App module AC Config Begin-->
        <intercept-url pattern="/TestDemos/**" filters="none"/>
        <intercept-url pattern="/UsersAdmin/**" access="ROLE_SUPERVISOR"/>
        <intercept-url pattern="/UserAdmin/**" access="IS_AUTHENTICATED_REMEMBERED"/>
        <intercept-url pattern="/customer/add/**" access="ROLE_CT_ADDER" />
        <intercept-url pattern="/customer/chg/**" access="ROLE_CT_CHGER" />
        <intercept-url pattern="/customer/del/**" access="ROLE_CT_DELER" />
        <intercept-url pattern="/customer/search/**" access="ROLE_CT_SEARCHER" />
        <intercept-url pattern="/config/make/**" access="ROLE_CM_DEClARER"/>
        <intercept-url pattern="/config/sl/**" access="ROLE_CM_EXACCEPTER"/>
        <intercept-url pattern="/config/sli/**" access="ROLE_CM_INACCEPTER"/>
        <intercept-url pattern="/sheetop/pre_*.jsp*" access="ROLE_CM_RESASSIGNER"/>
        <intercept-url pattern="/sheetop/fenfa_*.jsp*" access="ROLE_CM_WfDESPACHER"/>
        <intercept-url pattern="/sheetop/nc_*.jsp*" access="ROLE_CM_WFNETWORKER"/>
        <intercept-url pattern="/sheetop/Ap_*.jsp*" access="ROLE_CM_WFAPPER"/>
        <intercept-url pattern="/liuliang/**" access="ROLE_CM_DISCHARGER"/>
        <intercept-url pattern="/Bill/search.jsp*" access="ROLE_CM_BILLQUERYER"/>
        <intercept-url pattern="/Bill/admin/**" access="ROLE_CM_BILLADMINER"/>
        <intercept-url pattern="/tongji/**" access="ROLE_CM_STATER"/>
        <intercept-url pattern="/warning/**" access="ROLE_CM_WARNER"/>
        <!-- App module AC Config End-->
        <intercept-url pattern="/**" access="IS_AUTHENTICATED_REMEMBERED" />
        <form-login login-page='/login.jsp' authentication-failure-url="/login.jsp?login_error=1" default-target-url='/index.jsp?action=login' always-use-default-target="true" />
   		<concurrent-session-control max-sessions="1" exception-if-maximum-exceeded="true"/>
   </http>

	<authentication-provider>
		<jdbc-user-service data-source-ref="dataSource" 
		group-authorities-by-username-query="select U.username,G.group_name,GA.authority  as 'authority' from users U join group_members  GM on U.username=GM.username join groups G on GM.group_id=G.id join group_authorities GA on G.id=GA.group_id where  U.username=?"
		/>
		<password-encoder hash="sha">
			<salt-source user-property="username" />
		</password-encoder>
	</authentication-provider>
</beans:beans>

看这个个源码可能还是云山雾罩，所以推荐把这个文档看一遍就什么都明白了: Spring Security 2.0.x中文参考文档.pdf
下载：
http://returnofking.iteye.com/blog/255089