Barebonds Hello World安全示例

Question

我试图建立一个Barebonds Hello World安全示例。但我总是出错。

下面是我的web.xml：

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
    id="WebApp_ID" version="2.5">
    <display-name>MyFlow</display-name>
    <welcome-file-list>
        <welcome-file>index.html</welcome-file>
        <welcome-file>index.htm</welcome-file>
        <welcome-file>index.jsp</welcome-file>
        <welcome-file>default.html</welcome-file>
        <welcome-file>default.htm</welcome-file>
        <welcome-file>default.jsp</welcome-file>
    </welcome-file-list>
 <context-param>
  <param-name>contextConfigLocation</param-name>
  <param-value>/WEB-INF/spring/root-config.xml</param-value>
 </context-param>

 <listener>
  <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
 </listener>

 <servlet>
  <servlet-name>spring</servlet-name>
  <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
  <init-param>
    <param-name>contextConfigLocation</param-name>
    <param-value></param-value>
  </init-param>
  <load-on-startup>1</load-on-startup>
 </servlet>
 <servlet-mapping>
  <servlet-name>spring</servlet-name>
  <url-pattern>/</url-pattern>
 </servlet-mapping>
<filter>
<filter-name>springSecurityFilterChain</filter-name>
    <filter-class>
        org.springframework.web.filter.DelegatingFilterProxy
</filter-class>
</filter>
</web-app>

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:security="http://www.springframework.org/schema/security"
    xsi:schemaLocation="
        http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">

    <security:http>
        <security:form-login />
        <security:http-basic />
        <security:logout />
        <security:intercept-url pattern="/**" access="ROLE_MEMBER" />
    </security:http>

    <security:user-service id="userService">
        <security:user name="habuma" password="letmein"
            authorities="ROLE_MEMBER,ROLE_ADMIN" />
        <security:user name="twoqubed" password="longhorns"
            authorities="ROLE_MEMEBER" />
        <security:user name="admin" password="admin"
            authorities="ROLE_ADMIN" />
    </security:user-service>
</beans>

org.springframework.beans.factory.beanCreationException：创建名为“org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter#0”的bean时出错：在设置bean属性“Authentication Manager”时，无法解析对bean“org.springframework.security.authentication.ProviderManager#0”的引用；嵌套异常是

org.springframework.beans.factory.beanCreationException：创建名为“org.springframework.security.authentication.ProviderManager#0”的bean时出错：在设置构造函数参数时无法解析对bean“org.springframework.security.authentication.authenticationManagerFactoryBean#0”的引用；嵌套异常是

org.springframework.beans.factory.beanCreationException：创建名为'org.springframework.security.config.authentication.authenticationManagerFactoryBean#0'的bean时出错:FactoryBean在创建对象时引发异常；嵌套异常是

org.springframework.beans.factory.nosuchBeanDefinitionException：没有定义名为'org.springframework.security.authenticationManager'的bean：您是否忘记在配置中添加gobal元素（带有子元素）？或者，您可以在and元素上使用authentication-manager-ref属性。

在org.springframework.beans.factory.support.BeanDefinitionValueResolver.ResolvereFerence（BeanDefinitionValueResolver.java:328)

Answer 1

我认为您已经错过了authentication-manager声明（请参见spring security docs）

    <security:authentication-manager>
    <security:authentication-provider
        user-service-ref="userService" />
    </security:authentication-manager>