设为首页 加入收藏

TOP

Spring Security 学习之数据库认证(二)
2014-11-24 01:04:18 来源: 作者: 【 】 浏览:10
Tags:Spring Security 习之 数据库 认证
_GROUP_MEMBERS_SQL =
"delete from group_members where group_id = ";
public static final String DEF_RENAME_GROUP_SQL =
"update groups set group_name = where group_name = ";
public static final String DEF_INSERT_GROUP_MEMBER_SQL =
"insert into group_members (group_id, username) values ( , )";
public static final String DEF_DELETE_GROUP_MEMBER_SQL =
"delete from group_members where group_id = and username = ";
public static final String DEF_GROUP_AUTHORITIES_QUERY_SQL =
"select g.id, g.group_name, ga.authority " +
"from groups g, group_authorities ga " +
"where g.group_name = " +
"and g.id = ga.group_id ";
public static final String DEF_DELETE_GROUP_AUTHORITY_SQL =
"delete from group_authorities where group_id = and authority = ";


数据库安全认证配置示例:
< xml version="1.0" encoding="UTF-8" >
xmlns:security="http://www.springframework.org/schema/security"
xmlns:jdbc="http://www.springframework.org/schema/jdbc" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:context="http://www.springframework.org/schema/context"
xsi:schemaLocation="http://www.springframework.org/schema/jdbc http://www.springframework.org/schema/jdbc/spring-jdbc-3.2.xsd
http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.2.xsd
http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd">








data-source-ref="dataSource"
group-authorities-by-username-query="select g.id, g.group_name, ga.authority
from groups g, group_members gm, group_authorities ga
where gm.username = and g.id = ga.group_id and g.id = gm.group_id" />







embedded-database标签:Spring默认使用hsql,如果使用其他内存数据库,如Derby,需要指定。


jdbc-user-service标签:注入基于JDBC的UserDetailsService实现,默认即JdbcUserDetailsManager。


group-authorities-by-username-query标签:覆盖默认用户组权限查询SQL。


authentication-provider标签:如果没有设置ref属性引用其他bean时,默认使用DaoAuthenticationProvider, DaoAuthenticationProvider会调用UserDetailsService接口获取用户信息,并在登录时验证用户密码。


三、后语
本文提供一个基本实现参考供下载。


Spring Security 学习之数据库认证相关文件下载


具体下载目录在 /2014年资料/2月/28日/Spring Security 学习之数据库认证


首页 上一页 1 2 下一页 尾页 2/2/2
】【打印繁体】【投稿】【收藏】 【推荐】【举报】【评论】 【关闭】 【返回顶部
分享到: 
上一篇Spring Security 学习之LDAP认证 下一篇Java String常见问题回答

评论

帐  号: 密码: (新用户注册)
验 证 码:
表  情:
内  容: