Spring Security 学习笔记-securityContext过滤器过滤链学习

web.xml配置委托代理filter，filter-name默认与filter bean的名字保持一致。

<filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

过滤链代理配置

<!-- 自定义Spring Security过滤链 -->
    <beans:bean id="springSecurityFilterChain"
        class="org.springframework.security.web.FilterChainProxy">
        <beans:constructor-arg>
            <beans:list>
                <filter-chain pattern="/resources/**" filters="channelProcessingFilter" />
                <filter-chain pattern="/login" filters="channelProcessingFilter" />
                <filter-chain pattern="/" filters="channelProcessingFilter" />
                <filter-chain pattern="/error" filters="channelProcessingFilter" />
                <filter-chain pattern="/**"
                    filters="channelProcessingFilter,securityContextPersistenceFilter,usernamePasswordAuthenticationFilter,rememberMeAuthenticationFilter,logoutFilter,
                    exceptionTranslationFilter,concurrentSessionFilter,felicityFilterSecurityInterceptor" />
            </beans:list>
        </beans:constructor-arg>
    </beans:bean>

过滤链执行序列图