SSM中使用Spring Security强制通道的安全性,将http强制跳转为https

最新推荐文章于 2024-12-12 02:29:31 发布

技术拾光者

最新推荐文章于 2024-12-12 02:29:31 发布

阅读量1.5k

点赞数

CC 4.0 BY-SA版权

本文链接：https://blog.youkuaiyun.com/weixin_43319056/article/details/89710004

本文介绍如何在SSM框架中使用SpringSecurity进行安全性配置，通过配置类SecurityConfig实现从HTTP到HTTPS的强制跳转，确保数据传输安全。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

SSM中使用Spring Security强制通道的安全性

在maven工程中pom.xml文件中引入相关依赖。

    <!-- 第八部分：spring security依赖 -->
    <!-- https://mvnrepository.com/artifact/org.springframework.security/spring-security-core -->
    <dependency>
      <groupId>org.springframework.security</groupId>
      <artifactId>spring-security-core</artifactId>
      <version>5.1.5.RELEASE</version>
    </dependency><!-- https://mvnrepository.com/artifact/org.springframework.security/spring-security-config -->
    <dependency>
      <groupId>org.springframework.security</groupId>
      <artifactId>spring-security-config</artifactId>
      <version>5.1.5.RELEASE</version>
    </dependency>
    <!-- https://mvnrepository.com/artifact/org.springframework.security/spring-security-web -->
    <dependency>
      <groupId>org.springframework.security</groupId>
      <artifactId>spring-security-web</artifactId>
      <version>5.1.5.RELEASE</version>
    </dependency>

编写配置类SecurityConfig和SecurityWebInitializer

SecurityWebInitializer

package com.HW_CloudComputer.webconfig.securityconfig;

import org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer;

public class SecurityWebInitializer extends AbstractSecurityWebApplicationInitializer {
}

SecurityConfig

package com.HW_CloudComputer.webconfig.securityconfig;

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception{
        //将对应请求路径的请求由http跳转为https
       http.requiresChannel()
               .antMatchers("/realtime").requiresSecure();

    }
}