君，已阅读到文档的结尾了呢~~
广告剩余8秒
文档加载中
扫扫二维码，随身浏览文档
手机或平板扫扫即可继续访问
班级记录本 和谐版.doc
举报该文档为侵权文档。
举报该文档含有违规或不良信息。
反馈该文档无法正常浏览。
举报该文档为重复文档。
推荐理由：
将文档分享至：
分享完整地址
文档地址：
粘贴到BBS或博客
flash地址：
支持嵌入FLASH地址的网站使用
html代码：
&embed src='/DocinViewer-4.swf' width='100%' height='600' type=application/x-shockwave-flash ALLOWFULLSCREEN='true' ALLOWSCRIPTACCESS='always'&&/embed&
450px*300px480px*400px650px*490px
支持嵌入HTML代码的网站使用
您的内容已经提交成功
您所提交的内容需要审核后才能发布，请您等待！
3秒自动关闭窗口Spring Security（5）
&org.springframework.security:spring-security-web:4.1.0.RELEASE&,&org.springframework.security:spring-security-taglibs:4.1.0.RELEASE&,&org.springframework.security:spring-security-config:4.1.0.RELEASE&
configure(WebSecurity web)
public void configure(WebSecurity web) throws Exception {
// 设置不拦截规则
web.ignoring().antMatchers(&/pm/**&,&/common/**&,&/*.ico&);
configure(HttpSecurity http)
protected void configure(HttpSecurity http) throws Exception {
http.authorizeRequests().antMatchers(&/login&).anonymous();//指定登录界面容许匿名登录 
http.authorizeRequests() .anyRequest().authenticated() 
//容许嵌入框架iframe
.and().headers().frameOptions().disable() .and() .httpBasic()
//defaultSuccessUrl:指定登录成功后界面, loginPage:指定登录界面
.and().formLogin().defaultSuccessUrl(&/main.to&).loginPage(&/login&) .permitAll();
1.容许嵌入框架iframe跳转
.and().headers().frameOptions().disable()
2.指定登录界面
.and().formLogin().loginPage(&/login&)
3.指定登录成功后返回界面
.and().formLogin().defaultSuccessUrl(&/main.to&)
进入后台时进行权限验证
package com.framework.
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodS
* @author tzz
* @功能描述
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class MethodSecurityConfig{
}后台函数权限验证（范例）@PreAuthorize(&hasRole('002_02_202')&)
@ResponseBody
@RequestMapping(value=&/company.add&, method = RequestMethod.POST,params={&nameShort&,&name&,&remark&})
public Map&String,Object& add(String name,String nameShort, String remark) {
configure(AuthenticationManagerBuilder auth)
1.自定义盐值加密配置
DaoAuthenticationProvider authProvider = new DaoAuthenticationProvider();
ReflectionSaltSource saltSource = new ReflectionSaltSource();
//UserInfo.salt 盐值数据字段
saltSource.setUserPropertyToUse(&salt&);
authProvider.setPasswordEncoder(new Md5PasswordEncoder());
auth.authenticationProvider(authProvider);
2.自定义用户权限信息
自定义用户信息SQL
private String usersByUsernameQuery = &SELECT account,pwd,stat,salt,id,company_id,name,login_stat,login_date ,login_ip FROM USER_ACCOUNT WHERE ACCOUNT = ?&
自定义权限信息SQL
private String authoritiesByUsernameQuery = &SELECT NAME,POWER_CODE FROM VW_USER_POWER WHERE ACCOUNT_ID = ?&自定义用户权限信息对 configure(AuthenticationManagerBuilder auth)进行修改
protected void configure(AuthenticationManagerBuilder auth)
throws Exception {
DaoAuthenticationProvider authProvider = new DaoAuthenticationProvider();
ReflectionSaltSource saltSource = new ReflectionSaltSource();
saltSource.setUserPropertyToUse(&salt&);
authProvider.setSaltSource(saltSource);
authProvider.setUserDetailsService(userDetailsService());
authProvider.setPasswordEncoder(new Md5PasswordEncoder());
auth.authenticationProvider(authProvider);
protected UserInfoService userDetailsService() {
return new UserInfoService().setAuthoritiesUsernameQuery(this.authoritiesByUsernameQuery)
.setUsersUsernameQuery(this.usersByUsernameQuery).dataSource(dataSource);
}package com.framework.
import mons.logging.L
import mons.logging.LogF
import org.springframework.context.support.MessageSourceA
import org.springframework.dao.DataAccessE
import org.springframework.jdbc.core.RowM
import org.springframework.security.core.GrantedA
import org.springframework.security.core.SpringSecurityMessageS
import org.springframework.security.core.authority.AuthorityU
import org.springframework.security.core.authority.SimpleGrantedA
import org.springframework.security.core.userdetails.UserD
import org.springframework.security.core.userdetails.UserDetailsS
import org.springframework.security.core.userdetails.UsernameNotFoundE
import org.springframework.security.provisioning.JdbcUserDetailsM
import javax.sql.DataS
import java.util.*;
* @author tzz
* @功能描述
public class UserInfoService
extends JdbcUserDetailsManager implements UserDetailsService {
private Map&String, UserInfo& userMap =
protected final Log logger = LogFactory.getLog(getClass());
protected final MessageSourceAccessor messages = SpringSecurityMessageSource
.getAccessor();
private String usersByUsernameQ
private String authoritiesByUsernameQ
public UserInfoService() {
userMap = new HashMap&&();
public UserDetails loadUserByUsername(String username)
throws UsernameNotFoundException, DataAccessException {
List&UserDetails& users = loadUsersByUsername(username);
if (users.size() == 0) {
logger.debug(&Query returned no results for user '& + username + &'&);
throw new UsernameNotFoundException(messages.getMessage(
&JdbcDaoImpl.notFound&, new Object[] { username },
&Username {0} not found&));
UserInfo user = (UserInfo)users.get(0);
Set&GrantedAuthority& dbAuthsSet = new HashSet&GrantedAuthority&();
if (getEnableAuthorities()) {
dbAuthsSet.addAll(loadUserAuthorities(user.getId()));
if (getEnableGroups()) {
dbAuthsSet.addAll(loadGroupAuthorities(user.getUsername()));
List&GrantedAuthority& dbAuths = new ArrayList&GrantedAuthority&(dbAuthsSet);
addCustomAuthorities(user.getUsername(), dbAuths);
if (dbAuths.size() == 0) {
logger.debug(&User '& + username
+ &' has no authorities and will be treated as 'not found'&);
throw new UsernameNotFoundException(messages.getMessage(
&JdbcDaoImpl.noAuthority&, new Object[] { username },
&User {0} has no GrantedAuthority&));
return createUserDetails(username,user,dbAuths);
protected UserDetails createUserDetails(String username,
UserInfo userFromUserQuery, List&GrantedAuthority& combinedAuthorities) {
String returnUsername = userFromUserQuery.getUsername();
if (!isUsernameBasedPrimaryKey()) {
returnUsername =
UserInfo user = new UserInfo(returnUsername,userFromUserQuery.getPassword(), userFromUserQuery.isEnabled(), true, true, true,
combinedAuthorities);
user.setId(userFromUserQuery.getId());
user.setCompanyId(userFromUserQuery.getCompanyId());
user.setName(userFromUserQuery.getName());
user.setLoginStat(userFromUserQuery.getLoginStat());
user.setLoginDate(userFromUserQuery.getLoginDate());
user.setLoginIP(userFromUserQuery.getLoginIP());
user.setSalt(userFromUserQuery.getSalt());
* Loads authorities by executing the SQL from
* &tt&groupAuthoritiesByUsernameQuery&/tt&.
* @return a list of GrantedAuthority objects for the user
protected List&GrantedAuthority& loadUserAuthorities(int userId) {
return getJdbcTemplate().query(this.authoritiesByUsernameQuery,
new Object[] { userId },(RowMapper&GrantedAuthority&) (rs,rowNum)-& {
String roleName = getRolePrefix() + rs.getString(2);
return new SimpleGrantedAuthority(roleName);
} catch (Exception e) {
e.printStackTrace();
* Loads authorities by executing the SQL from &tt&authoritiesByUsernameQuery&/tt&.
* @return a list of GrantedAuthority objects for the user
protected List&UserDetails& loadUsersByUsername(String username)
return getJdbcTemplate().query(this.usersByUsernameQuery, new Object[] { username},
(RowMapper&UserDetails&) (rs, rowNum) -& {
String username1 = rs.getString(1);
String password = rs.getString(2);
boolean enabled = rs.getBoolean(3);
UserInfo user = new UserInfo(username1, password, enabled, true, true, true,
AuthorityUtils.NO_AUTHORITIES);
user.setSalt(rs.getString(4));
user.setId(rs.getInt(5));
user.setCompanyId(rs.getInt(6));
user.setName(rs.getString(7));
user.setLoginStat(rs.getInt(8));
user.setLoginDate(rs.getLong(9));
user.setLoginIP(rs.getString(10));
} catch (Exception e) {
e.printStackTrace();
public UserInfoService setAuthoritiesUsernameQuery(String authoritiesByUsernameQuery) {
this.authoritiesByUsernameQuery = authoritiesByUsernameQ
public UserInfoService setUsersUsernameQuery(String usersByUsernameQuery) {
this.usersByUsernameQuery = usersByUsernameQ
UserInfoService dataSource(DataSource dataSource) {
super.setDataSource(dataSource);
}package com.framework.
import org.springframework.security.core.GrantedA
import org.springframework.security.core.userdetails.U
import java.util.C
 * @author tzz
 * @功能描述
 * @date
 * 修改人    修改时间   修改说明
 ****/
public class UserInfo extends User {
   
    private int companyId;//所属公司
    private int loginSystemId = 0;//当前登录系统ID
    private S//用户名称
    private int loginS//登录状态 1:登录 2:未登陆
    private String loginIP;//登录IP
    private long loginD//登录时间
    private S
    public UserInfo(String username, String password, Collection&? extends GrantedAuthority& authorities) {
        super(username, password, authorities);
    }
    public UserInfo(String username, String password, boolean enabled, boolean accountNonExpired, boolean credentialsNonExpired, boolean accountNonLocked, Collection&? extends GrantedAuthority& authorities) {
        super(username, password, enabled, accountNonExpired, credentialsNonExpired, accountNonLocked, authorities);
    }
    public String getSalt() {
       
    }
    public void setSalt(String salt) {
        this.salt =
    }
    public int getId() {
       
    }
    public void setId(int id) {
        this.id =
    }
    public int getCompanyId() {
        return companyId;
    }
    public void setCompanyId(int companyId) {
        panyId = companyId;
    }
    public int getLoginSystemId() {
        return loginSystemId;
    }
    public void setLoginSystemId(int loginSystemId) {
        this.loginSystemId = loginSystemId;
    }
    public String getName() {
       
    }
    public void setName(String name) {
        this.name =
    }
    public int getLoginStat() {
        return loginS
    }
    public void setLoginStat(int loginStat) {
        this.loginStat = loginS
    }
    public String getLoginIP() {
        return loginIP;
    }
    public void setLoginIP(String loginIP) {
        this.loginIP = loginIP;
    }
    public long getLoginDate() {
        return loginD
    }
    public void setLoginDate(long loginDate) {
        this.loginDate = loginD
    }
参考知识库
* 以上用户言论只代表其个人观点，不代表CSDN网站的观点或立场
访问：3819次
排名：千里之外
原创：12篇
(6)(2)(2)(1)(3)点绛唇的推荐 | LOFTER（乐乎） - 记录生活，发现同好
LOFTER for ipad —— 记录生活，发现同好
点绛唇 的推荐
&nbsp&nbsp被喜欢
&nbsp&nbsp被喜欢
{list posts as post}
{if post.type==1 || post.type == 5}
{if !!post.title}${post.title|escape}{/if}
{if !!post.digest}${post.digest}{/if}
{if post.type==2}
{if post.type == 3}
{if !!post.image}
{if post.type == 4}
{if !!post.image}
{if !!photo.labels && photo.labels.length>0}
{var wrapwidth = photo.ow < 500?photo.ow:500}
{list photo.labels as labs}
{var lbtxtwidth = Math.floor(wrapwidth*(labs.ort==1?labs.x:(100-labs.x))/100)-62}
{if lbtxtwidth>12}
{if !!labs.icon}
{list photos as photo}
{if photo_index==0}{break}{/if}
品牌${make||'-'}
型号${model||'-'}
焦距${focalLength||'-'}
光圈${apertureValue||'-'}
快门速度${exposureTime||'-'}
ISO${isoSpeedRatings||'-'}
曝光补偿${exposureBiasValue||'-'}
镜头${lens||'-'}
{if data.msgRank == 1}{/if}
{if data.askSetting == 1}{/if}
{if defined('posts')&&posts.length>0}
{list posts as post}
{if post_index < 3}
{if post.type == 1 || post.type == 5}
{if !!post.title}${post.title|escape}{/if}
{if !!post.digest}${post.digest}{/if}
{if post.type == 2}
{if post.type == 3}
{if post.type == 4}
{if drlist.length>0}
更多相似达人：
{list drlist as dr}{if drlist.length === 3 && dr_index === 0}、{/if}{if drlist.length === 3 && dr_index === 1}、{/if}{if drlist.length === 2 && dr_index === 0}、{/if}{/list}
暂无相似达人，
{if defined('posts')&&posts.length>0}
{list posts as post}
{if post.type == 2}
{if post.type == 3}
{if post.type == 4}
this.p={ dwrMethod:'querySharePosts', fpost:'',userId:4394888,blogListLength:30};【图文】上海市建平实验_百度文库
两大类热门资源免费畅读
续费一年阅读会员，立省24元！
评价文档：
上海市建平实验
上传于||文档简介
&&上&#8203;海&#8203;市&#8203;建&#8203;平&#8203;实&#8203;验
大小：104.00KB
登录百度文库，专享文档复制特权，财富值每天免费拿！
你可能喜欢}