Spring JSF2.0+；春季3.2安全_Spring_Jsf_Spring Security

Spring JSF2.0+；春季3.2安全

spring jsf spring-security

Spring JSF2.0+；春季3.2安全,spring,jsf,spring-security,Spring,Jsf,Spring Security,我正试图用JSF页面运行我的第一个Spring安全项目，但一开始我就被卡住了。我的应用程序如下所示： <?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:sec="http://www.springframework.org/schema/security" xmlns:xsi="http://www.w3.org/

我正试图用JSF页面运行我的第一个Spring安全项目，但一开始我就被卡住了。我的应用程序如下所示：

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:sec="http://www.springframework.org/schema/security"
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xmlns:task="http://www.springframework.org/schema/task"
   xmlns:util="http://www.springframework.org/schema/util"
   xmlns:context="http://www.springframework.org/schema/context"
   xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
    http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd
    http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd
    http://www.springframework.org/schema/task http://www.springframework.org/schema/task/spring-task-3.1.xsd
    http://www.springframework.org/schema/security
    http://www.springframework.org/schema/security/spring-security-3.1.xsd">

<task:executor id="executor" pool-size="8-25" queue-capacity="100" />
<task:scheduler id="scheduler" pool-size="10" />
<task:annotation-driven />

<bean scope="singleton" id="userBean" class="cz.web.ejb.UserTestScheduleBean">
    <property name="ts" ref="scheduler"/>
</bean>

  <sec:http auto-config='true'>
    <sec:intercept-url pattern="/**" access="ROLE_USER" />
  </sec:http>
 <sec:authentication-manager>
    <sec:authentication-provider>
      <sec:user-service>
        <sec:user name="jimi" password="jimispassword" authorities="ROLE_USER, ROLE_ADMIN" />
        <sec:user name="bob" password="bobspassword" authorities="ROLE_USER" />
      </sec:user-service>
    </sec:authentication-provider>
  </sec:authentication-manager>
</beans>

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://java.sun.com/xml/ns/javaee"
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
     version="3.0" metadata-complete="true">

<display-name>SpringWebApp</display-name>

<!-- JSF Mapping -->
<servlet>
    <servlet-name>facesServlet</servlet-name>
    <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
    <load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
    <servlet-name>facesServlet</servlet-name>
    <url-pattern>*.xhtml</url-pattern>
</servlet-mapping>

<listener>
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
</listener>

<context-param>
    <param-name>contextConfigLocation</param-name>
    <param-value>
        /WEB-INF/spring/applicationContext.xml
    </param-value>
</context-param>

<!-- Welcome page -->
<welcome-file-list>
    <welcome-file>index.xhtml</welcome-file>
</welcome-file-list>

<filter>
    <filter-name>springSecurityFilterChain</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>

<filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

</web-app>


SpringWebApp
小脸蛋
javax.faces.webapp.FacesServlet
1.
小脸蛋
*.xhtml
org.springframework.web.context.ContextLoaderListener
上下文配置位置
/WEB-INF/spring/applicationContext.xml
index.xhtml
springSecurityFilterChain
org.springframework.web.filter.DelegatingFilterProxy
springSecurityFilterChain
/*

applicationContext.xml

<?xml  version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xmlns:task="http://www.springframework.org/schema/task"
   xmlns:util="http://www.springframework.org/schema/util"
   xmlns:context="http://www.springframework.org/schema/context"
   xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
    http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd
    http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd
    http://www.springframework.org/schema/task http://www.springframework.org/schema/task/spring-task-3.0.xsd">

<task:executor id="executor" pool-size="8-25" queue-capacity="100" />
<task:scheduler id="scheduler" pool-size="10" />
<task:annotation-driven />

<bean scope="singleton" id="userBean" class="cz.web.ejb.UserTestScheduleBean">
    <property name="ts" ref="scheduler"/>
</bean>


</beans>

faces-config.xml

<?xml version="1.0" encoding="UTF-8"?>
<faces-config xmlns="http://java.sun.com/xml/ns/javaee"
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
http://java.sun.com/xml/ns/javaee/web-facesconfig_2_1.xsd"
          version="2.1">

<application>
    <el-resolver>
        org.springframework.web.jsf.el.SpringBeanFacesELResolver
    </el-resolver>
</application>
<managed-bean>
    <managed-bean-name>userTestManagedBeans</managed-bean-name>
    <managed-bean-class>cz.web.managedBeans.UserTestManagedBeans</managed-bean-class>
    <managed-bean-scope>session</managed-bean-scope>
    <managed-property>
        <property-name>ejb</property-name>
        <value>#{userBean}</value>
    </managed-property>
</managed-bean>
</faces-config>


org.springframework.web.jsf.el.SpringBeanFacesELResolver
userTestManagedBeans
cz.web.managedBeans.UserTestManagedBeans
一场
ejb
#{userBean}

启动应用程序时，出现异常：

SEVERE: Exception starting filter springSecurityFilterChain
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'springSecurityFilterChain' is defined
at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanDefinition(DefaultListableBeanFactory.java:549)
at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedLocalBeanDefinition(AbstractBeanFactory.java:1096)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:278)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:198)
at org.springframework.context.support.AbstractApplicationContext.getBean(AbstractApplicationContext.java:1121)
at org.springframework.web.filter.DelegatingFilterProxy.initDelegate(DelegatingFilterProxy.java:326)
at org.springframework.web.filter.DelegatingFilterProxy.initFilterBean(DelegatingFilterProxy.java:236)
at org.springframework.web.filter.GenericFilterBean.init(GenericFilterBean.java:194)
at org.apache.catalina.core.ApplicationFilterConfig.initFilter(ApplicationFilterConfig.java:281)
at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:262)
at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:107)
at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:4775)
at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5452)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:633)
at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:663)
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:542)
at org.apache.catalina.startup.HostConfig.check(HostConfig.java:1468)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at org.apache.tomcat.util.modeler.BaseModelMBean.invoke(BaseModelMBean.java:301)
at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:819)
at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:801)
at org.apache.catalina.manager.ManagerServlet.check(ManagerServlet.java:1447)
at org.apache.catalina.manager.ManagerServlet.deploy(ManagerServlet.java:862)
at org.apache.catalina.manager.ManagerServlet.doGet(ManagerServlet.java:358)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:621)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:108)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:611)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:953)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1041)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:603)
at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.doRun(AprEndpoint.java:2430)
at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.run(AprEndpoint.java:2419)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:744)

严重：启动筛选器springSecurityFilterChain时出现异常
org.springframework.beans.factory.NoSuchBean定义异常：未定义名为“springSecurityFilterChain”的bean
位于org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanDefinition（DefaultListableBeanFactory.java:549）
位于org.springframework.beans.factory.support.AbstractBeanFactory.getMergedLocalBeanDefinition（AbstractBeanFactory.java:1096）
位于org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean（AbstractBeanFactory.java:278）
位于org.springframework.beans.factory.support.AbstractBeanFactory.getBean（AbstractBeanFactory.java:198）
位于org.springframework.context.support.AbstractApplicationContext.getBean（AbstractApplicationContext.java:1121）
位于org.springframework.web.filter.DelegatingFilterProxy.initDelegate（DelegatingFilterProxy.java:326）
位于org.springframework.web.filter.DelegatingFilterProxy.initFilterBean（DelegatingFilterProxy.java:236）
位于org.springframework.web.filter.GenericFilterBean.init（GenericFilterBean.java:194）
位于org.apache.catalina.core.ApplicationFilterConfig.initFilter（ApplicationFilterConfig.java:281）
位于org.apache.catalina.core.ApplicationFilterConfig.getFilter（ApplicationFilterConfig.java:262）
位于org.apache.catalina.core.ApplicationFilterConfig.（ApplicationFilterConfig.java:107）
位于org.apache.catalina.core.StandardContext.filterStart（StandardContext.java:4775）
位于org.apache.catalina.core.StandardContext.startInternal（StandardContext.java:5452）
位于org.apache.catalina.util.LifecycleBase.start（LifecycleBase.java:150）
位于org.apache.catalina.core.ContainerBase.addChildInternal（ContainerBase.java:901）
位于org.apache.catalina.core.ContainerBase.addChild（ContainerBase.java:877）
位于org.apache.catalina.core.StandardHost.addChild（StandardHost.java:633）
位于org.apache.catalina.startup.HostConfig.deployDescriptor（HostConfig.java:663）
位于org.apache.catalina.startup.HostConfig.deployApps（HostConfig.java:542）
位于org.apache.catalina.startup.HostConfig.check（HostConfig.java:1468）
在sun.reflect.NativeMethodAccessorImpl.invoke0（本机方法）处
在sun.reflect.NativeMethodAccessorImpl.invoke（NativeMethodAccessorImpl.java:57）中
在sun.reflect.DelegatingMethodAccessorImpl.invoke（DelegatingMethodAccessorImpl.java:43）中
位于java.lang.reflect.Method.invoke（Method.java:606）
位于org.apache.tomcat.util.modeler.BaseModelMBean.invoke（BaseModelMBean.java:301）
位于com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke（DefaultMBeanServerInterceptor.java:819）
位于com.sun.jmx.mbeanserver.JmxMBeanServer.invoke（JmxMBeanServer.java:801）
位于org.apache.catalina.manager.ManagerServlet.check（ManagerServlet.java:1447）
位于org.apache.catalina.manager.ManagerServlet.deploy（ManagerServlet.java:862）
位于org.apache.catalina.manager.ManagerServlet.doGet（ManagerServlet.java:358）
位于javax.servlet.http.HttpServlet.service（HttpServlet.java:621）
位于javax.servlet.http.HttpServlet.service（HttpServlet.java:728）
位于org.apache.catalina.core.ApplicationFilterChain.internalDoFilter（ApplicationFilterChain.java:305）
位于org.apache.catalina.core.ApplicationFilterChain.doFilter（ApplicationFilterChain.java:210）
位于org.apache.tomcat.websocket.server.WsFilter.doFilter（WsFilter.java:51）
位于org.apache.catalina.core.ApplicationFilterChain.internalDoFilter（ApplicationFilterChain.java:243）
位于org.apache.catalina.core.ApplicationFilterChain.doFilter（ApplicationFilterChain.java:210）
位于org.apache.catalina.filters.SetCharacterEncodingFilter.doFilter（SetCharacterEncodingFilter.java:108）
位于org.apache.catalina.core.ApplicationFilterChain.internalDoFilter（ApplicationFilterChain.java:243）
位于org.apache.catalina.core.ApplicationFilterChain.doFilter（ApplicationFilterChain.java:210）
位于org.apache.catalina.core.StandardWrapperValve.invoke（StandardWrapperValve.java:222）
位于org.apache.catalina.core.StandardContextValve.invoke（StandardContextValve.java:123）
位于org.apache.catalina.authenticator.AuthenticatorBase.invoke（AuthenticatorBase.java:611）
位于org.apache.catalina.core.StandardHostValve.invoke（StandardHostValve.java:171）
位于org.apache.catalina.valves.ErrorReportValve.invoke（ErrorReportValve.java:100）
位于org.apache.catalina.valves.AccessLogValve.invoke（AccessLogValve.java:953）
位于org.apache.catalina.core.StandardEngineValve.invoke（StandardEngineValve.java:118）
位于org.apache.catalina.connector.CoyoteAdapter.service（CoyoteAdapter.java:408）
位于org.apache.coyote.http11.AbstractHttp11Processor.process（AbstractHttp11Processor.java:1041）
位于org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process（AbstractProtocol.java:603）
位于org.apache.tomcat.util.net.aprendop$SocketProcessor.doRun（aprendop.java:2430）
位于org.apache.tomcat.util.net.aprendop$SocketProcessor.run（aprendop.java:2419）
位于java.util.concurrent.ThreadPoolExecutor.runWorker（ThreadPoolExecutor.java:1145）
位于java.util.concurrent.ThreadPoolExecutor$Worker.run（ThreadPoolExecutor.java:615）
运行（Thread.java:744）

唯一的bean springSecurityFilterChain是web.xml中的Filter，但我想使用web.xml中的Filter，而不是名为springSecur的bean

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:sec="http://www.springframework.org/schema/security"
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xmlns:task="http://www.springframework.org/schema/task"
   xmlns:util="http://www.springframework.org/schema/util"
   xmlns:context="http://www.springframework.org/schema/context"
   xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
    http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd
    http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd
    http://www.springframework.org/schema/task http://www.springframework.org/schema/task/spring-task-3.1.xsd
    http://www.springframework.org/schema/security
    http://www.springframework.org/schema/security/spring-security-3.1.xsd">

<task:executor id="executor" pool-size="8-25" queue-capacity="100" />
<task:scheduler id="scheduler" pool-size="10" />
<task:annotation-driven />

<bean scope="singleton" id="userBean" class="cz.web.ejb.UserTestScheduleBean">
    <property name="ts" ref="scheduler"/>
</bean>

  <sec:http auto-config='true'>
    <sec:intercept-url pattern="/**" access="ROLE_USER" />
  </sec:http>
 <sec:authentication-manager>
    <sec:authentication-provider>
      <sec:user-service>
        <sec:user name="jimi" password="jimispassword" authorities="ROLE_USER, ROLE_ADMIN" />
        <sec:user name="bob" password="bobspassword" authorities="ROLE_USER" />
      </sec:user-service>
    </sec:authentication-provider>
  </sec:authentication-manager>
</beans>

<dependency>
    <groupId>org.springframework.security</groupId>
    <artifactId>spring-security-config</artifactId>
    <version>yourVersion</version>
</dependency>