security框架 配置文件

1...spring_security.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xmlns:security="http://www.springframework.org/schema/security"
       xsi:schemaLocation="http://www.springframework.org/schema/beans
       http://www.springframework.org/schema/beans/spring-beans.xsd
       http://www.springframework.org/schema/security
       http://www.springframework.org/schema/security/spring-security.xsd">
    <!--不拦截静态资源-->
    <security:http pattern="/css/**" security="none"></security:http>
    <security:http pattern="/img/**" security="none"></security:http>
    <security:http pattern="/plugins/**" security="none"></security:http>
    <!--不拦截登录   不拦截error -->
    <security:http pattern="/login.jsp" security="none"></security:http>
    <security:http pattern="/error.jsp" security="none"></security:http>
    <security:http pattern="/favicon.ico" security="none"></security:http>
    <!--拦截规则-->
    <!--配置拦截的规则
   auto-config   使用自带页面
       use-expressions  是否使用spel   表达式
  -->
    <security:http auto-config="true" use-expressions="false">
        <!--配置；拦截地址   -->
        <security:intercept-url pattern="/**" access="ROLE_USER"></security:intercept-url>
        <!--配置你想跳转的具体页面-->
        <security:form-login
        login-page="/login.jsp"
        login-processing-url="/login"
        default-target-url="/index.jsp"
        authentication-failure-url="/login.jsp"
        ></security:form-login>
        <!--关闭跨域请求-->
        <security:csrf disabled="true"></security:csrf>
        <!--    退出登录-->
        <security:logout invalidate-session="true" logout-url="/logout" logout-success-url="/login.jsp"></security:logout>
    </security:http>
    <!--自带账户密码-->
    <security:authentication-manager>
        <security:authentication-provider user-service-ref="sysUserService">
<!--            <security:password-encoder ref="passwordEncoder"></security:password-encoder>-->
<!--            <security:user-service>-->
<!--                &lt;!&ndash;临时账户密码  不加密&ndash;&gt;-->
<!--                <security:user  name="admin" password="{noop}admin" authorities="ROLE_USER"></security:user>-->
<!--            </security:user-service>-->
        </security:authentication-provider>
    </security:authentication-manager>
    <bean id="passwordEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder"></bean>
</beans>

2....web.xml

<!DOCTYPE web-app PUBLIC
 "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
 "http://java.sun.com/dtd/web-app_2_3.dtd" >

<web-app>
  <display-name>Archetype Created Web Application</display-name>
    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>classpath*:applicationContext*.xml,classpath:spring_security.xml</param-value>
    </context-param>
    <filter>
        <filter-name>CharacterEncodingFilter</filter-name>
        <filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>
        <init-param>
            <param-name>encoding</param-name>
            <param-value>utf-8</param-value>
        </init-param>
    </filter>
    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>CharacterEncodingFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <!-- spring security 的过滤器配置 -->

    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
    <servlet>
        <servlet-name>DispatcherServlet</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <init-param>
            <param-name>contextConfigLocation</param-name>
            <param-value>classpath*:spring_mvc.xml</param-value>
        </init-param>
        <!--        按照tomcat顺序加载-->
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>DispatcherServlet</servlet-name>
        <url-pattern>/</url-pattern>
    </servlet-mapping>
    <welcome-file-list>
        <welcome-file>index.html</welcome-file>
        <welcome-file>index.htm</welcome-file>
        <welcome-file>index.jsp</welcome-file>
        <welcome-file>default.html</welcome-file>
        <welcome-file>default.htm</welcome-file>
        <welcome-file>default.jsp</welcome-file>
    </welcome-file-list>
</web-app>

3...MD5 java代码 加密密码

package com.wsc.md5;

import java.math.BigInteger;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;

public class MD5Utils {
    /**
     * 使用md5的算法进行加密
     */
    public static String md5(String plainText) {
        byte[] secretBytes = null;
        try {
            secretBytes = MessageDigest.getInstance("md5").digest(
                    plainText.getBytes());
        } catch (NoSuchAlgorithmException e) {
            throw new RuntimeException("没有md5这个算法！");
        }
        String md5code = new BigInteger(1, secretBytes).toString(16);// 16进制数字
        // 如果生成数字未满32位，需要前面补0
        for (int i = 0; i < 32 - md5code.length(); i++) {
            md5code = "0" + md5code;
        }
        return md5code;
    }

    public static void main(String[] args) {
        System.out.println(md5("123"));
    }

}

4...获取明文密码

//  md5
        @Autowired
        PasswordEncoder passwordEncoder;
    @RequestMapping("/add")
    public String add(Sysuser sysuser){

        // 获取明文密码
//        String password = sysuser.getPASSWORD();
//        // 对明文密码加密
//        String md5password = passwordEncoder.encode(password);
//        sysuser.setPASSWORD(md5password);
        sysuserService.add(sysuser);
        return "redirect:/user/pageChange";
    }