Spring 线程:如何绕过
无过滤器 有办法进入吗 当我使用filters=none时,我会出现这个错误 org.springframework.beans.factory.parsing.BeanDefinitionParsingException:Config 持续时间问题:不再支持使用筛选器='none'。请拒绝 为要排除的模式指定一个单独的元素,并使用att 属性security='none'。有问题的资源:ServletContext资源[/WEB-INF/ springservlet.xml]Spring 线程:如何绕过,spring,spring-security,oauth-2.0,intercept,Spring,Spring Security,Oauth 2.0,Intercept,无过滤器 有办法进入吗 当我使用filters=none时,我会出现这个错误 org.springframework.beans.factory.parsing.BeanDefinitionParsingException:Config 持续时间问题:不再支持使用筛选器='none'。请拒绝 为要排除的模式指定一个单独的元素,并使用att 属性security='none'。有问题的资源:ServletContext资源[/WEB-INF/ springservlet.xml] i have
i have a spring configuration,
i want to access <intercept-url pattern="/trusted/**" filters = "none" />
您需要添加一个额外的http元素:
<http access-denied-page="/login.jsp" access-decision-manager-ref="accessDecisionManager" xmlns="http://www.springframework.org/schema/security">
<intercept-url pattern="/photos" access="ROLE_USER,SCOPE_READ" />
<intercept-url pattern="/photos/**" access="ROLE_USER,SCOPE_READ" />
<!-- <intercept-url pattern="/trusted/**" access="ROLE_USER,SCOPE_TRUST" />-->
<intercept-url pattern="/trusted/**" filters = "none" />
<intercept-url pattern="/oauth/token" access="IS_AUTHENTICATED_ANONYMOUSLY" />
<intercept-url pattern="/oauth/**" access="ROLE_USER" />
<intercept-url pattern="/request_token_authorized.jsp" access="ROLE_USER,DENY_OAUTH" />
<intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY,DENY_OAUTH" />
<form-login authentication-failure-url="/login.jsp" default-target-url="/index.jsp" login-page="/login.jsp"
login-processing-url="/login.do" />
<logout logout-success-url="/index.jsp" logout-url="/logout.do" />
<anonymous />
<custom-filter ref="oauth2ProviderFilter" after="EXCEPTION_TRANSLATION_FILTER" />
</http>
您需要添加一个额外的http元素:
<http access-denied-page="/login.jsp" access-decision-manager-ref="accessDecisionManager" xmlns="http://www.springframework.org/schema/security">
<intercept-url pattern="/photos" access="ROLE_USER,SCOPE_READ" />
<intercept-url pattern="/photos/**" access="ROLE_USER,SCOPE_READ" />
<!-- <intercept-url pattern="/trusted/**" access="ROLE_USER,SCOPE_TRUST" />-->
<intercept-url pattern="/trusted/**" filters = "none" />
<intercept-url pattern="/oauth/token" access="IS_AUTHENTICATED_ANONYMOUSLY" />
<intercept-url pattern="/oauth/**" access="ROLE_USER" />
<intercept-url pattern="/request_token_authorized.jsp" access="ROLE_USER,DENY_OAUTH" />
<intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY,DENY_OAUTH" />
<form-login authentication-failure-url="/login.jsp" default-target-url="/index.jsp" login-page="/login.jsp"
login-processing-url="/login.do" />
<logout logout-success-url="/index.jsp" logout-url="/logout.do" />
<anonymous />
<custom-filter ref="oauth2ProviderFilter" after="EXCEPTION_TRANSLATION_FILTER" />
</http>
使用thıs解决:成功您可以发布自己的答案并接受它,以便其他人知道此问题已解决在类型为“org.springframework.security.web.access.expression.WebSecurityExpressionRoot”的对象上找不到属性或字段“isıu AUTHENTICATEDıunonymously”无法使用thıs:成功您可以发布自己的答案回答并接受它,以便其他人知道此问题已解决在“org.springframework.security.web.access.expression.WebSecurityExpressionRoot”类型的对象上找不到属性或字段“is_AUTHENTICATED_ANONYMOUSLY”