com.mbap.auth.config

Class SecurityConfig

java.lang.Object

org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

com.mbap.auth.config.SecurityConfig

All Implemented Interfaces:

org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

@Configuration(value="com.mbap.auth.config.SecurityConfig")
 @EnableWebSecurity
 @EnableGlobalMethodSecurity(prePostEnabled=true)
 @Order(value=-1)
public class SecurityConfig
extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

基于session的访问安全配置

Author:

Amanda.Z

Constructor Summary

Constructors

Constructor and Description
SecurityConfig()

Method Summary

Modifier and Type	Method and Description
org.springframework.security.authentication.AuthenticationManager	authenticationManagerBean() 注册用户身份鉴定管理类，需要和基于token的验证区分开阿里，否则oauth2不能支持password（用户密码）鉴权模式
void	configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http) 访问策略

Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

configure, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver, userDetailsServiceBean

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityConfig

public SecurityConfig()

Method Detail

authenticationManagerBean

@Bean
public org.springframework.security.authentication.AuthenticationManager authenticationManagerBean()
                                                                                                   throws java.lang.Exception

注册用户身份鉴定管理类，需要和基于token的验证区分开阿里，否则oauth2不能支持password（用户密码）鉴权模式

Overrides:

authenticationManagerBean in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Returns:

Throws:

java.lang.Exception

configure

public void configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
               throws java.lang.Exception

访问策略

Overrides:

configure in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Throws:

java.lang.Exception