一个spring_security的问题，解决了几天了!找高手解决。

chaohua20 2011-01-10 12:18:46
资源认证器


package com.onionbbs.security;



import java.util.Collection;

import java.util.Iterator;



import org.springframework.security.access.AccessDecisionManager;

import org.springframework.security.access.AccessDeniedException;

import org.springframework.security.access.ConfigAttribute;

import org.springframework.security.access.SecurityConfig;

import org.springframework.security.authentication.InsufficientAuthenticationException;

import org.springframework.security.core.Authentication;

import org.springframework.security.core.GrantedAuthority;





public class GamersAccessDecisionManager implements AccessDecisionManager {



    public void decide(Authentication authentication, Object object,

            Collection<ConfigAttribute> configAttributes)

            throws AccessDeniedException, InsufficientAuthenticationException {



        if(configAttributes == null){

            return ;

        }

        System.out.println("Object:"+object.toString());  

        

        Iterator<ConfigAttribute> ite=configAttributes.iterator();

        while(ite.hasNext()){

        	

            ConfigAttribute ca=ite.next();

            //怎么这里输出这个是ROLE_ANONYMOUS

            System.out.println(authentication.getAuthorities());

            String needRole=((SecurityConfig)ca).getAttribute();

            for(GrantedAuthority ga:authentication.getAuthorities()){

                if(needRole.equals(ga.getAuthority())){

                	

                	return;

                   

                }

            }

        }



        throw new AccessDeniedException("no right");

    }

    public boolean supports(ConfigAttribute attribute){

    	

        return true;

    }

    public boolean supports(Class<?> clazz) {

    	

        return true;

    }





}



自定义的一个拦截器


package com.onionbbs.security;

import java.util.ArrayList;

import java.util.Collection;

import java.util.HashMap;

import java.util.Iterator;

import java.util.List;

import java.util.Map;

import java.util.Set;



import org.springframework.security.access.ConfigAttribute;

import org.springframework.security.access.SecurityConfig;

import org.springframework.security.web.FilterInvocation;

import org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource;

import org.springframework.security.web.util.AntUrlPathMatcher;

import org.springframework.security.web.util.UrlMatcher;



import com.OnionEntertainment.Security.Service.SecurityResourceServiceImp;

import com.onionbbs.model.Resources;

import com.onionbbs.model.Role;





public class InvocationSecurityMetadataSource

        implements FilterInvocationSecurityMetadataSource {



    private UrlMatcher urlMatcher = new AntUrlPathMatcher();;

    private static Map<String, Collection<ConfigAttribute>> resourceMap = null;





    private SecurityResourceServiceImp securityResourceService;

    

    public void setSecurityResourceService(

			SecurityResourceServiceImp securityResourceService) {

		this.securityResourceService = securityResourceService;

	}





	public void loadResourceDefine() {

        resourceMap = new HashMap<String, Collection<ConfigAttribute>>();



        for(Resources item:securityResourceService.getAllResources()){

        

          	resourceMap.put(item.getUrl(), listRoleToCollection(item.getRole()));

        }

    }



	

	public Collection<ConfigAttribute> listRoleToCollection(Set<Role> set){

		List<ConfigAttribute> list=new ArrayList<ConfigAttribute>();

		for(Role role:set){

			System.out.println("=================================="+role.getName()+"==============");

			list.add(new SecurityConfig(role.getName()));

		}

		return list;

	}



    public Collection<ConfigAttribute> getAttributes(Object object)

            throws IllegalArgumentException {

        String url = ((FilterInvocation)object).getRequestUrl();

        Iterator<String> ite = resourceMap.keySet().iterator();

        while (ite.hasNext()) {

            String resURL = ite.next();

            if (urlMatcher.pathMatchesUrl(url, resURL)) {

                return resourceMap.get(resURL);

            }

        }

        return null;

    }



    public boolean supports(Class<?> clazz) {

        return true;

    }

    

    public Collection<ConfigAttribute> getAllConfigAttributes() {

        return null;

    }



}



获得用户和权限


package com.onionbbs.security;



import java.util.ArrayList;

import java.util.Collection;

import java.util.List;

import java.util.Set;



import org.springframework.dao.DataAccessException;

import org.springframework.security.core.GrantedAuthority;

import org.springframework.security.core.authority.GrantedAuthorityImpl;

import org.springframework.security.core.userdetails.User;

import org.springframework.security.core.userdetails.UserDetails;

import org.springframework.security.core.userdetails.UserDetailsService;

import org.springframework.security.core.userdetails.UsernameNotFoundException;



import com.OnionEntertainment.Security.Service.SecurityUserServiceImp;

import com.onionbbs.model.Role;

import com.onionbbs.model.UserTable;



public class UserDetailService implements UserDetailsService{

	

	

	private SecurityUserServiceImp securityUserService;



	public void setSecurityUserService(SecurityUserServiceImp securityUserService) {

		this.securityUserService = securityUserService;

	}











	public UserDetails loadUserByUsername(String username)

			throws UsernameNotFoundException, DataAccessException {





		List<UserTable> usertable=securityUserService.getuser(username);

		UserTable usertab=new UserTable();

		usertab.setId(usertable.get(0).getId());

		usertab.setNickname(usertable.get(0).getNickname());

		usertab.setUsername(username);

		usertab.setEnabled(usertable.get(0).getEnabled());

		usertab.setRoles(usertable.get(0).getRoles());



        User user = new User(username,

                "robin", true, true, true, true, listRoleToCollection(usertable.get(0).getRoles()));

        return user;



	}

	

	public Collection<GrantedAuthority> listRoleToCollection(Set<Role> set){

		List<GrantedAuthority> list=new ArrayList<GrantedAuthority>();

		for(Role role:set){

			System.out.println(role.getName());

			list.add(new GrantedAuthorityImpl(role.getName()));

		}

		return list;

	}



}


把资源查询出来


package com.onionbbs.security;

import java.util.ArrayList;

import java.util.Collection;

import java.util.HashMap;

import java.util.Iterator;

import java.util.List;

import java.util.Map;

import java.util.Set;



import org.springframework.security.access.ConfigAttribute;

import org.springframework.security.access.SecurityConfig;

import org.springframework.security.web.FilterInvocation;

import org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource;

import org.springframework.security.web.util.AntUrlPathMatcher;

import org.springframework.security.web.util.UrlMatcher;



import com.OnionEntertainment.Security.Service.SecurityResourceServiceImp;

import com.onionbbs.model.Resources;

import com.onionbbs.model.Role;





public class InvocationSecurityMetadataSource

        implements FilterInvocationSecurityMetadataSource {



    private UrlMatcher urlMatcher = new AntUrlPathMatcher();;

    private static Map<String, Collection<ConfigAttribute>> resourceMap = null;





    private SecurityResourceServiceImp securityResourceService;

    

    public void setSecurityResourceService(

			SecurityResourceServiceImp securityResourceService) {

		this.securityResourceService = securityResourceService;

	}





	public void loadResourceDefine() {

        resourceMap = new HashMap<String, Collection<ConfigAttribute>>();



        for(Resources item:securityResourceService.getAllResources()){

        

          	resourceMap.put(item.getUrl(), listRoleToCollection(item.getRole()));

        }

    }



	

	public Collection<ConfigAttribute> listRoleToCollection(Set<Role> set){

		List<ConfigAttribute> list=new ArrayList<ConfigAttribute>();

		for(Role role:set){

			System.out.println("=================================="+role.getName()+"==============");

			list.add(new SecurityConfig(role.getName()));

		}

		return list;

	}



    public Collection<ConfigAttribute> getAttributes(Object object)

            throws IllegalArgumentException {

        String url = ((FilterInvocation)object).getRequestUrl();

        Iterator<String> ite = resourceMap.keySet().iterator();

        while (ite.hasNext()) {

            String resURL = ite.next();

            if (urlMatcher.pathMatchesUrl(url, resURL)) {

                return resourceMap.get(resURL);

            }

        }

        return null;

    }



    public boolean supports(Class<?> clazz) {

        return true;

    }

    

    public Collection<ConfigAttribute> getAllConfigAttributes() {

        return null;

    }



}
...全文
1593 6 打赏 收藏 转发到动态 举报
AI 作业
写回复
用AI写文章
6 条回复
切换为时间正序
请发表友善的回复…
发表回复
chaohua20 2011-01-10
  • 打赏
  • 举报
 回复
上面GamersAccessDecisionManager 查询输出是ROLE_ANONYMOUS一直登陆不了，我的数据库里面是role_user在这里怎么变成了ROLE_ANONYMOUS了？
在自定义的拦截器里面我输出了role.getName()是==================================ROLE_USER==============
高手们能详细说说吗？我真的搞不懂了，初弄security出了好多问题了。只能发30分的帖子。全部分送上。
chaohua20 2011-01-10
  • 打赏
  • 举报
 回复
确切的说是我一打开/index.jsp就会出现这个东西[ROLE_ANONYMOUS]这个是我自己输出的 


//怎么这里输出这个是ROLE_ANONYMOUS

            System.out.println(authentication.getAuthorities());

这个在资源认证器里面
chaohua20 2011-01-10
  • 打赏
  • 举报
 回复
恩我第一次登陆就出现这个东西
chaohua20 2011-01-10
  • 打赏
  • 举报
 回复
解决了是这里密码传错了 User user = new User(username,
"robin", true, true, true, true, listRoleToCollection(usertable.get(0).getRoles()));
一洽客服系统 2011-01-10
  • 打赏
  • 举报
 回复
WebAuthenticationDetails@957e: RemoteIpAddress: 127.0.0.1; SessionId: null; Granted Authorities: ROLE_ANONYMOUS 你又登陆吗？
chaohua20 2011-01-10
  • 打赏
  • 举报
 回复
Level: DEBUG
Time: 2011-01-10 00:59:39,281
Method: org.springframework.security.access.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:191)
Message: Secure object: FilterInvocation: URL: /index.jsp; Attributes: [ROLE_USER]

Level: DEBUG
Time: 2011-01-10 00:59:39,281
Method: org.springframework.security.access.intercept.AbstractSecurityInterceptor.authenticateIfRequired(AbstractSecurityInterceptor.java:292)
Message: Previously Authenticated: org.springframework.security.authentication.AnonymousAuthenticationToken@9055e4a6: Principal: anonymousUser; Password: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@957e: RemoteIpAddress: 127.0.0.1; SessionId: null; Granted Authorities: ROLE_ANONYMOUS
Object:FilterInvocation: URL: /index.jsp
[ROLE_ANONYMOUS]
验证的时候出的信息
【Java】已解决：org.springframework.beans.factory.NoSuchBeanDefinitionException找不到Bean定义异常
该异常通常在Spring容器无法找到所需的Bean定义时抛出。此错误会导致应用程序无法启动或在运行时抛出异常。典型的场景包括在Spring应用程序中注入依赖时，由于配置错误或未正确声明Bean，导致Spring容器无法找到相应的Bean。为了正确解决该报错问题，我们需要确保所有依赖的Bean都已正确声明，并且Spring能够扫描到这些Bean。被声明为Spring Bean，Spring容器可以正确地找到并注入该Bean。在上述代码中，如果Spring容器无法找到。的Bean定义，就会抛出。
【java报错已解决】org.springframework.web.HttpSessionRequiredException
在Java Web开发的征程中，报错信息就如同一个个隐藏在暗处的小怪兽，时不时地跳出来给开发者和环境配置者们制造些麻烦。其中，org.springframework.web.HttpSessionRequiredException这个报错更是让不少人头疼不已。当面对这样的报错时，我们该如何精准地找到问题所在，并迅速将其解决呢？今天，就让我们一同深入剖析这个报错，为大家拨开迷雾，找到应对之策
【Java】已解决：org.springframework.beans.factory.BeanNotOfRequiredTypeException
已解决：org.springframework.beans.factory.BeanNotOfRequiredTypeException。此异常通常出现在尝试从Spring上下文获取Bean时，由于类型不匹配而导致无法正确注入依赖。为了解决该报错问题，我们需要确保在获取Bean时，类型匹配。通过上述代码，我们可以确保在获取Bean时，类型匹配且安全转换，避免。在使用Spring框架进行依赖注入时，开发者可能会遇到。报错问题，确保Spring依赖注入功能正常运行。类型的Bean时，可能会遇到。
SpringSecurity框架|荣耀磨练
Spring Security是一个高度自定义的安全框架。利用Spring IoC/DI和AOP功能，为系统提供了声明式安全访问控制功能，减少了为系统安全而编写大量重复代码的工作。
【Java报错已解决】org.springframework.context.ApplicationContextException
在Java开发过程中，我们常常会遇到各种各样的报错信息，这些报错就像拦路虎，阻碍了我们的项目顺利推进。其中，org.springframework.context.ApplicationContextException这个报错更是让许多开发者和环境配置者头疼不已。今天，我们就深入探讨一下这个报错的产生原因以及如何有效地解决它。
Java EE

67,550

社区成员

225,863

社区内容

发帖
与我相关
我的任务
社区描述
J2EE只是Java企业应用。我们需要一个跨J2SE/WEB/EJB的微容器，保护我们的业务核心组件（中间件），以延续它的生命力，而不是依赖J2SE/J2EE版本。
社区管理员
  • Java EE
加入社区
  • 近7日
  • 近30日
  • 至今

加载中

查看更多榜单
社区公告
暂无公告

试试用AI创作助手写篇文章吧

+ 用AI写文章