spring security3 xml配置详细说明注释

由于项目需要spring security架构，找了很多地方没有对该架构下xml文件的详细说明，最后找到了这一篇文章http://zhoualine.iteye.com/blog/1755233，这篇文章对各个标签的含义还比较详细，根据注释，可以理解一下xml配置的含义，供大家一起学习，共勉！

其中springsecurity.xml的详细注释如下：

 xml version="1.0" encoding="UTF-8"?>
 <beans:beans xmlns="http://www.springframework.org/schema/security"
     xmlns:beans="http://www.springframework.org/schema/beans"
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 xsi:schemaLocation="http://www.springframework.org/schema/beans
 http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
 http://www.springframework.org/schema/security
 http://www.springframework.org/schema/security/spring-security-3.1.xsd">
     <global-method-security pre-post-annotations="enabled">
     global-method-security>

     <http pattern="/include/js/**" security="none" />
     <http pattern="/include/css/**" security="none" />
     <http pattern="/include/scripts/**" security="none" />
     <http pattern="/include/jsp/**" security="none" />
     <http pattern="/images/**" security="none" />
     <http pattern="/login.jsp" security="none" />






     <http use-expressions="true" auto-config="true"
         access-denied-page="/include/jsp/timeout.jsp">






 <form-login login-page="/login.jsp" default-target-url='/system/default.jsp'
         always-use-default-target="true" authentication-failure-url="/login.jsp?login_error=1" />



         <logout invalidate-session="true" logout-success-url="/login.jsp"
             logout-url="/j_spring_security_logout" />

         <remember-me />






         <session-management invalid-session-url="/login.jsp"
             session-fixation-protection="none">
             <concurrency-control max-sessions="1"
                 error-if-maximum-exceeded="false" />
         session-management>
         <custom-filter ref="myFilter" before="FILTER_SECURITY_INTERCEPTOR" />
         <session-management
             session-authentication-strategy-ref="sas" />

     http>
 <beans:bean id="sas"
 class="org.springframework.security.web.authentication.session.ConcurrentSessionControlStrategy">
         <beans:constructor-arg name="sessionRegistry"
             ref="sessionRegistry" />
         <beans:property name="maximumSessions" value="1" />

         <beans:property name="alwaysCreateSession" value="true" />
         <beans:property name="migrateSessionAttributes" value="false" />

         <beans:property name="exceptionIfMaximumExceeded"
             value="false" />
     beans:bean>
     <beans:bean id="sessionRegistry"
         class="org.springframework.security.core.session.SessionRegistryImpl" />


     <beans:bean
         class="org.springframework.security.authentication.event.LoggerListener" />

     <beans:bean id="messageSource"
 class="org.springframework.context.support.ReloadableResourceBundleMessageSource">
         <beans:property name="basenames" value="classpath:message_zh_CN">
 beans:property>
     beans:bean>

     <beans:bean id="myFilter"
         class="com.taskmanager.web.security.MySecurityFilter">

     <beans:property name="authenticationManager" ref="myAuthenticationManager" />

     <beans:property name="accessDecisionManager" ref="myAccessDecisionManager" />

     <beans:property name="securityMetadataSource" ref="mySecurityMetadataSource" />
     beans:bean>

     <authentication-manager alias="myAuthenticationManager">
         <authentication-provider user-service-ref="myUserDetailServiceImpl">

             <password-encoder hash="md5" ref="passwordEncoder">
             password-encoder>
         authentication-provider>
     authentication-manager>

     <beans:bean id="myAccessDecisionManager"
         class="com.taskmanager.web.security.MyAccessDecisionManager">
     beans:bean>

     <beans:bean id="mySecurityMetadataSource"
         class="com.taskmanager.web.security.MySecurityMetadataSource">
         <beans:constructor-arg name="powerService" ref="powerService">
 beans:constructor-arg>
     beans:bean>

     <beans:bean id="myUserDetailServiceImpl"
         class="com.taskmanager.web.security.MyUserDetailServiceImpl">
         <beans:property name="userService" ref="userService">beans:property>
     beans:bean>


     <beans:bean id="passwordEncoder"
 class="org.springframework.security.authentication.encoding.Md5PasswordEncoder" />
 beans:beans>

再贴上一个web.xml的配置（红色标注部分是重点）

 xml version="1.0" encoding="UTF-8"?>
 <web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
     http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
     <context-param>
         <description>Spring applicationContextdescription>
         <param-name>contextConfigLocationparam-name>
         <param-value>
             /WEB-INF/spring/application*.xml
         param-value>
     context-param>
 <listener>
         <description>SpringContextLoaderListenerdescription>
         <display-name>SpringContextLoaderListenerdisplay-name>
 <listener-class>org.springframework.web.context.ContextLoaderListenerlistener-class>
     listener>

     <filter>
         <filter-name>springSecurityFilterChainfilter-name>
         <filter-class>org.springframework.web.filter.DelegatingFilterProxyfilter-class>
     filter>
     <filter-mapping>
         <filter-name>springSecurityFilterChainfilter-name>
         <url-pattern>*.jhurl-pattern>
         <url-pattern>*.jspurl-pattern>
         <url-pattern>/j_spring_security_checkurl-pattern>
         <url-pattern>/j_spring_security_logouturl-pattern>
     filter-mapping>