认证、授权攻略三（1）、spring security（与springmvc集成实战）

最新推荐文章于 2025-06-29 16:20:22 发布

java爱分享

最新推荐文章于 2025-06-29 16:20:22 发布

阅读量538

点赞数

CC 4.0 BY-SA版权

分类专栏：认证、授权文章标签： spring security

本文链接：https://blog.youkuaiyun.com/ETTTTTSS/article/details/97381510

本文介绍了Spring Security的集成实战，包括环境配置、Hello World案例、配置文件解析和核心元素讲解，如http元素的pattern、use-expressions、intercept-url以及authentication-manager的相关配置。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

概述

Spring Security，这是一种基于 Spring AOP 和 Servlet 过滤器的安全框架。它提供全面的安全性解决方案，同时在 Web 请求级和方法调用级处理身份确认和授权。

开发环境

	Eclipse Mars.2 Release (4.5.2) 
	JDK1.8.0_65 
	apache-maven-3.3.9
	apache-tomcat-8.0.47
	mysql-5.6.38-winx64

Hello World实战

项目说明：

建立maven项目：SSM；
框架：springmvc-5.0.8.RELEASE、spring-security-5.0.8.RELEASE；

1、pom.xml

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  
  <modelVersion>4.0.0</modelVersion>
  <groupId>com.javasgj.ssm</groupId>
  <artifactId>SSM</artifactId>
  <version>0.0.1-SNAPSHOT</version>
  <packaging>war</packaging>
  <name>SSM</name>
  <description>SSM</description>
  
  <properties>
  	<spring.version>5.0.8.RELEASE</spring.version>
  	<druid.version>1.1.9</druid.version>
  	<mysql.version>5.1.38</mysql.version>
  	<fastjson.version>1.2.58</fastjson.version>
  	<java.version>1.8</java.version>
  </properties>
  
  <dependencies>
    <!-- spring-webmvc -->
	<dependency>
	    <groupId>org.springframework</groupId>
	    <artifactId>spring-webmvc</artifactId>
	    <version>${spring.version}</version>
	</dependency>
    
    <!-- spring --> 
 	<dependency> 
	   	<groupId>org.springframework</groupId> 
	   	<artifactId>spring-core</artifactId>   
	   	<version>${spring.version}</version>      	
   	</dependency>    	
   	<dependency> 
       	<groupId>org.springframework</groupId> 
       	<artifactId>spring-beans</artifactId> 
       	<version>${spring.version}</version>        	
   	</dependency>   
  		<dependency> 
       	<groupId>org.springframework</groupId> 
       	<artifactId>spring-context</artifactId>
       	<version>${spring.version}</version>         	
   	</dependency>
   	<!-- spring jdbc -->
	<dependency>
	    <groupId>org.springframework</groupId>
	    <artifactId>spring-jdbc</artifactId>
	    <version>5.0.8.RELEASE</version>
	</dependency>
   	
   	<!-- spring-security -->
	<dependency>
	    <groupId>org.springframework.security</groupId>
	    <artifactId>spring-security-core</artifactId>
	    <version>${spring.version}</version>
	</dependency>
	<dependency>
	    <groupId>org.springframework.security</groupId>
	    <artifactId>spring-security-web</artifactId>
	    <version>${spring.version}</version>
	</dependency>
	<dependency>
	    <groupId>org.springframework.security</groupId>
	    <artifactId>spring-security-config</artifactId>
	    <version>${spring.version}</version>
	</dependency>
	<dependency>
	    <groupId>org.springframework.security</groupId>
	    <artifactId>spring-security-crypto</artifactId>
	    <version>${spring.version}</version>
	</dependency>
	
	<!-- Druid database connection pool -->
	<dependency>
	    <groupId>com.alibaba</groupId>
	    <artifactId>druid-spring-boot-starter</artifactId>
	    <version>${druid.version}</version>
	</dependency>
	
	<!-- mysql -->
	<dependency>
	    <groupId>mysql</groupId>
	    <artifactId>mysql-connector-java</artifactId>
	    <version>${mysql.version}</version>
	</dependency>
    
	<!-- fastjson -->
	<dependency>
	    <groupId>com.alibaba</groupId>
	    <artifactId>fastjson</artifactId>
	    <version>${fastjson.version}</version>
	</d