Spring Security 配置详解

      
               xmlns:p="http://www.springframework.org/schema/p" 
           xmlns:security="http://www.springframework.org/schema/security" 
           xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd  
            http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.2.xsd">  
     
          
                      class="org.springframework.security.util.FilterChainProxy">  
              
                                        CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON  
                        PATTERN_TYPE_APACHE_ANT  
                        /**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,securityContextHolderAwareRequestFilter,rememberMeProcessingFilter,anonymousProcessingFilter,exceptionTranslationFilter,filterSecurityInterceptor  
                    ]]>  
              
          
          
                      class="org.springframework.security.context.HttpSessionContextIntegrationFilter"/>  
          
                      class="org.springframework.security.ui.logout.LogoutFilter">  
              
              
              
              
                  
                      
                      
                      
                  
              
          
          
                      class="org.springframework.security.ui.webapp.AuthenticationProcessingFilter" 
              p:authenticationManager-ref="authenticationManager" 
              p:authenticationFailureUrl="/login.action?login_error=1" 
              p:defaultTargetUrl="/user.action" 
              p:filterProcessesUrl="/j_spring_security_check" 
              p:rememberMeServices-ref="rememberMeServices"/>  
          
          
                      class="org.springframework.security.providers.ProviderManager" 
              p:sessionController-ref="concurrentSessionController">  
              
                  
                      
                                                class="org.springframework.security.providers.anonymous.AnonymousAuthenticationProvider" 
                            p:key="springsecurity"/>  
                                                class="org.springframework.security.providers.rememberme.RememberMeAuthenticationProvider" 
                            p:key="springsecurity"/>  
                  
              
          
          
                      class="org.springframework.security.concurrent.ConcurrentSessionControllerImpl" 
              p:maximumSessions="1" 
              p:exceptionIfMaximumExceeded="true" 
              p:sessionRegistry-ref="sessionRegistry" 
              p:messageSource-ref="messageSource"/>  
     
                      class="org.springframework.security.concurrent.SessionRegistryImpl"/>  
     
                      class="org.springframework.context.support.ReloadableResourceBundleMessageSource" 
              p:basename="/WEB-INF/classes/messages_zh_CN"/>  
     
                      class="org.springframework.security.wrapper.SecurityContextHolderAwareRequestFilter"/>  
          
                      class="org.springframework.security.ui.rememberme.RememberMeProcessingFilter" 
              p:authenticationManager-ref="authenticationManager" 
              p:rememberMeServices-ref="rememberMeServices"/>  
          
                      class="org.springframework.security.providers.anonymous.AnonymousProcessingFilter" 
              p:key="springsecurity" 
              p:userAttribute="anonymousUser,ROLE_ANONYMOUS"/>  
          
                      class="org.springframework.security.ui.ExceptionTranslationFilter" 
              p:accessDeniedHandler-ref="accessDeniedHandler" 
              p:authenticationEntryPoint-ref="authenticationEntryPoint"/>  
     
          
                      class="org.springframework.security.ui.AccessDeniedHandlerImpl" 
              p:errorPage="/accessDenied.jsp"/>  
          
                      class="org.springframework.security.ui.webapp.AuthenticationProcessingFilterEntryPoint" 
              p:loginFormUrl="/login.action" 
              p:forceHttps="false"/>  
     
          
                      class="org.springframework.security.intercept.web.FilterSecurityInterceptor" 
              p:authenticationManager-ref="authenticationManager" 
              p:accessDecisionManager-ref="accessDecisionManager" 
              p:objectDefinitionSource-ref="objectDefinitionSource">  
          
                      class="com.shopin.modules.security.intercept.web.DataBaseFilterInvocationDefinitionSource" 
              p:convertUrlToLowercaseBeforeComprison="true" 
              p:useAntPath="true" 
              p:cacheManager-ref="securityCacheManager"/>  
          
                      class="org.springframework.security.vote.AffirmativeBased" 
              p:allowIfAllAbstainDecisions="false">  
              
                  
                      
                      
                  
              
          
     
                      class="org.springframework.security.ui.rememberme.TokenBasedRememberMeServices" 
              p:key="springsecurity" 
              p:userDetailsService-ref="userDetailsService"/>  
     
                      class="org.springframework.security.providers.dao.DaoAuthenticationProvider" 
              p:userCache-ref="userCache" 
              p:passwordEncoder-ref="passwordEncoder" 
              p:userDetailsService-ref="userDetailsService"/>  
                      class="org.springframework.security.providers.encoding.Md5PasswordEncoder"/>  
     
          
                      class="com.shopin.modules.security.resourcedetails.EhCacheResourceCache">  
              
                                      p:cacheManager-ref="cacheManager" 
                      p:cacheName="resourceCache"/>  
              
          
                      class="org.springframework.security.providers.dao.cache.EhCacheBasedUserCache">  
              
                                      p:cacheManager-ref="cacheManager" 
                      p:cacheName="userCache"/>  
              
          
                      class="org.springframework.cache.ehcache.EhCacheManagerFactoryBean" 
              p:configLocation="classpath:ehcache-hibernate.xml">  
          
     
          
     
                      class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean" 
              p:transactionManager-ref="transactionManager" 
              p:proxyTargetClass="true">  
              
                                      p:sessionFactory-ref="sessionFactory" 
                      p:resourcCache-ref="resourceCache"/>  
              
              
                  
                    PROPAGATION_REQUIRED,readOnly  
                    PROPAGATION_REQUIRED,readOnly  
                  
              
          
     
                      class="org.springframework.security.event.authentication.LoggerListener"/>