spring4.2.3+mybatis+spring-security配置文件

时间：2021-03-17 20:19:34

1.web.xml

<?xml version="1.0" encoding="UTF-8"?>

<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

    xmlns="http://java.sun.com/xml/ns/javaee"

    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"

    version="3.0">

    <display-name>ranking-server</display-name>

    <listener>

        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>

    </listener>

    <context-param>

        <param-name>ES_Host</param-name>

        <param-value>localhost</param-value>

    </context-param>

    <context-param>

        <param-name>ES_Port</param-name>

        <param-value>9300</param-value>

    </context-param>

    <context-param>

        <param-name>contextConfigLocation</param-name>

        <param-value>classpath:spring-task.xml</param-value>

    </context-param>

    <!-- log4j -->

    <context-param>

        <param-name>webAppRootKey</param-name>

        <param-value>project.root</param-value>

        <!-- 用于定位log文件输出位置在web应用根目录下，log4j配置文件中写输出位置：log4j.appender.FILE.File=${project.root}/logs/project.log -->

    </context-param>

    <context-param>

        <!-- 载入log4j配置文件 -->

        <param-name>log4jConfigLocation</param-name>

        <param-value>classpath:props/log4j.properties</param-value>

    </context-param>

    <context-param>

        <!-- Spring刷新Log4j配置文件的间隔60秒,单位为millisecond -->

        <param-name>log4jRefreshInterval</param-name>

        <param-value>60000</param-value>

    </context-param>

    <listener>

        <listener-class>org.springframework.web.util.Log4jConfigListener</listener-class>

    </listener>

    <listener>

        <listener-class>com.thomsonreuters.ranking.listener.ContextListener</listener-class>

    </listener>

    <!-- 编码过滤器 -->

    <filter>

        <filter-name>characterEncodingFilter</filter-name>

        <filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>

        <init-param>

            <param-name>encoding</param-name>

            <param-value>UTF-8</param-value>

        </init-param>

        <init-param>

            <param-name>forceEncoding</param-name>

            <param-value>true</param-value>

        </init-param>

    </filter>

    <filter-mapping>

        <filter-name>characterEncodingFilter</filter-name>

        <url-pattern>/*</url-pattern>

    </filter-mapping>

    <!-- SpringSecurity必须的filter -->

    <filter>

        <filter-name>springSecurityFilterChain</filter-name>

        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>

    </filter>

    <filter-mapping>

        <filter-name>springSecurityFilterChain</filter-name>

        <url-pattern>/*</url-pattern>

    </filter-mapping>

    <context-param>

        <param-name>contextConfigLocation</param-name>

        <param-value>

        classpath:spring-mvc.xml

        classpath:spring-security.xml

        classpath:spring-mybatis.xml

        </param-value>

    </context-param>

    <servlet>

        <servlet-name>spring</servlet-name>

        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>

        <init-param>

            <param-name>contextConfigLocation</param-name>

            <param-value>classpath:spring-mvc.xml</param-value>

        </init-param>

        <load-on-startup>1</load-on-startup>

    </servlet>

    <servlet-mapping>

        <servlet-name>spring</servlet-name>

        <url-pattern>/</url-pattern>

    </servlet-mapping>

    <welcome-file-list>

        <welcome-file>index.jsp</welcome-file>

    </welcome-file-list>

</web-app>

2.spring-mvc.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"

    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p"

    xmlns:mvc="http://www.springframework.org/schema/mvc" xmlns:context="http://www.springframework.org/schema/context"

    xmlns:task="http://www.springframework.org/schema/task"

    xsi:schemaLocation="http://www.springframework.org/schema/beans

                        http://www.springframework.org/schema/beans/spring-beans-4.2.xsd

                         http://www.springframework.org/schema/context

                        http://www.springframework.org/schema/context/spring-context-4.2.xsd

                          http://www.springframework.org/schema/mvc

                          http://www.springframework.org/schema/mvc/spring-mvc-4.2.xsd

                         http://www.springframework.org/schema/task

                        http://www.springframework.org/schema/task/spring-task-4.2.xsd">

    <!-- 自动扫描该包，使SpringMVC认为包下用了 @Controller @Server @Component注解的类是控制器 -->

    <context:component-scan base-package="com.thomsonreuters.ranking.controller" />

    <context:component-scan base-package="com.thomsonreuters.ranking.service" />

    <!-- 默认的注解映射的支持 -->

    <mvc:annotation-driven />

    <!-- 配置资源文件,防止被拦截 -->

    <mvc:resources location="/bootstrap/" mapping="/bootstrap/**" />

    <mvc:resources location="/js/" mapping="/js/**" />

    <mvc:resources location="/css/" mapping="/css/**" />

    <mvc:resources location="/html/" mapping="/html/**" />

    <!--定义拦截器 -->

    <mvc:interceptors>

        <!-- 使用bean定义一个Interceptor，直接定义在mvc:interceptors根下面的Interceptor将拦截所有的请求 -->

        <!-- 定义在mvc:interceptor下面的表示是对特定的请求才进行拦截的 -->

        <mvc:interceptor>

            <mvc:mapping path="/restApi/*" />

            <bean class="com.thomsonreuters.ranking.interceptor.AccessInterceptor" />

        </mvc:interceptor>

    </mvc:interceptors>

    <!--配置返回json  -->

    <bean

        class="org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter">

        <property name="messageConverters">

            <list>

                <ref bean="mappingJacksonHttpMessageConverter" />

            </list>

        </property>

    </bean>

    <bean id="mappingJacksonHttpMessageConverter"

        class="org.springframework.http.converter.json.MappingJackson2HttpMessageConverter">

        <property name="supportedMediaTypes">

            <list>

                <value>text/html;charset=UTF-8</value>

            </list>

        </property>

    </bean>

    <!-- 定义跳转的文件的前后缀 ，视图模式配置 -->

    <bean

        class="org.springframework.web.servlet.view.InternalResourceViewResolver">

        <property name="prefix" value="/WEB-INF/jsp/" />

        <property name="suffix" value=".jsp" />

        <property name="viewClass"

            value="org.springframework.web.servlet.view.JstlView" />

    </bean>

</beans>

3.spring-security.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"

    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

    xmlns:security="http://www.springframework.org/schema/security"

    xsi:schemaLocation="http://www.springframework.org/schema/beans

               http://www.springframework.org/schema/beans/spring-beans-4.2.xsd

            http://www.springframework.org/schema/security

            http://www.springframework.org/schema/security/spring-security-4.0.xsd">

    <!-- restApi/getLawFirmInfo?language=en&seqid=100001 -->

    <!--  Spring-Security 的配置 -->

    <security:http auto-config="true" use-expressions="true">

        <security:access-denied-handler error-page="/user/denied"/>

        <security:intercept-url pattern="/main/common" access="hasRole('ROLE_USER')" />

        <security:intercept-url pattern="/main/admin" access="hasRole('ROLE_ADMIN')"/>

        <security:intercept-url pattern="/restApi/**" access="permitAll"/>

        <security:csrf disabled="true" />

        <security:form-login login-page="/user/login"

                             login-processing-url="/user/login.do"

                             authentication-failure-url="/user/login?error=true"

                             default-target-url="/main/common"/>

        <security:logout

                logout-url="/user/logout"

                logout-success-url="/user/login"

                />

    </security:http>

     <!-- 指定一个自定义的authentication-manager :customUserDetailsService -->

    <security:authentication-manager>

            <security:authentication-provider user-service-ref="customUserDetailsService">

                    <security:password-encoder ref="passwordEncoder"/>

            </security:authentication-provider>

    </security:authentication-manager>

    <!-- 对密码进行MD5编码 -->

    <bean class="org.springframework.security.authentication.encoding.Md5PasswordEncoder" id="passwordEncoder"/>

    <bean id="customUserDetailsService" class="com.thomsonreuters.ranking.service.CustomUserDetailsService"/>

</beans>

4.log4j.properties

java.util.logging.FileHandler.encoding=UTF-8

log4j.rootLogger=debug , stdout , file ,err

### stdout ###

log4j.appender.stdout = org.apache.log4j.ConsoleAppender

log4j.appender.stdout.layout = org.apache.log4j.PatternLayout

log4j.appender.stdout.layout.ConversionPattern =[%-5p] %m%n  

### log file ###

log4j.appender.file = org.apache.log4j.DailyRollingFileAppender

log4j.appender.file.File = ../logs/rest_server.log

log4j.appender.file.Append = true

log4j.appender.file.Threshold = debug

log4j.appender.file.layout = org.apache.log4j.PatternLayout

log4j.appender.file.layout.ConversionPattern = %d-[TS] %p %t %c - %m%n

###mybits

log4j.logger.com.ibatis=DEBUG

log4j.logger.com.ibatis.common.jdbc.SimpleDataSource=DEBUG

log4j.logger.com.ibatis.common.jdbc.ScriptRunner=DEBUG

log4j.logger.com.ibatis.sqlmap.engine.impl.SqlMapClientDelegate=DEBUG

log4j.logger.java.sql.Connection=DEBUG

log4j.logger.java.sql.Statement=DEBUG

log4j.logger.java.sql.PreparedStatement=DEBUG,stdout

### exception ###

log4j.appender.err = org.apache.log4j.DailyRollingFileAppender

log4j.appender.err.File = ../logs/err.log

log4j.appender.err.Append = true

log4j.appender.err.Threshold = ERROR

log4j.appender.err.layout = org.apache.log4j.PatternLayout

log4j.appender.err.layout.ConversionPattern = %d-[TS] %p %t %c - %m%n

相关文章