Spring Security：带有数据源的Java配置

Question

pom.xml已更新：

spring.version=3.2.4.发布spring.security.version=3.1.4.发布

...
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-javaconfig</artifactId>
            <version>1.0.0.M1</version>
        </dependency>
...
        <repository>
            <id>repository.springsource.milestone</id>
            <name>SpringSource Milestone Repository</name>
            <url>http://repo.springsource.org/milestone</url>
        </repository>

然后我添加了一个新的java配置类，而不是spring-security.xml

package com.sprsec.init;

import javax.sql.DataSource;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

import com.sprsec.service.CustomUserDetailsService;

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Autowired
    private DataSource dataSource;

    @Override
    protected void registerAuthentication(AuthenticationManagerBuilder auth) throws Exception {
        auth.jdbcAuthentication().dataSource(dataSource);
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.userDetailsService(new CustomUserDetailsService())
            .authorizeUrls()
            .antMatchers("/sec/moderation.html").hasRole("MODERATOR")
            .antMatchers("/admin/**").hasRole("ADMIN")
            .and()
            .formLogin()
            .loginPage("/user-login.html")
            .defaultSuccessUrl("/success-login.html")
            .failureUrl("/error-login.html")
            .permitAll()
            .and()
            .logout()
            .logoutSuccessUrl("/index.html");
    }

}

package com.sprsec.init;

import org.springframework.web.servlet.support.AbstractAnnotationConfigDispatcherServletInitializer;

public class Initializer extends
        AbstractAnnotationConfigDispatcherServletInitializer {

    @Override
    protected Class<?>[] getRootConfigClasses() {
        return new Class[] { WebAppConfig.class };
    }

    @Override
    protected Class<?>[] getServletConfigClasses() {
        return new Class[] { WebAppConfig.class };
    }

    @Override
    protected String[] getServletMappings() {
        return new String[] { "/" };
    }

}

null

有人能给出一个建议吗？

Answer 1

您可能遇到了依赖关系冲突。运行Maven dependency:tree，找出使用了哪些依赖项，并查找相互冲突的依赖项。此外，使用maven-enforcer-plugin可能会有所帮助。

查看示例项目，您使用的是Spring3.1.3，对于Spring Security也是如此，您希望为Spring和Spring Security提供分离的属性。

<properties>
  <hibernate.version>4.1.7.Final</hibernate.version>
  <mysql.connector.version>5.1.21</mysql.connector.version>
  <slf4j.version>1.6.6</slf4j.version>
  <spring.version>3.2.4.RELEASE</spring.version>
  <spring.security.version>3.1.4.RELEASE<spring.security.version>
  <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
</properties>

至于Spring Security性，您可能希望尝试新的3.2.0.rc1，因为它已经包含了新的Spring Security性javaconfig，并提供了改进和一些方便的超类。