Spring Security 需要入口点和缺少 bean 类型

Question

我在 Spring MVC 应用程序上使用 Spring Security。与其他示例不同，我正在实现接口 UserDetailsS​​ervice。我已经为我将在下面发布的内容创建了一个 bean。我现在直接重定向到拒绝访问页面。我相信这是因为入口点参考。但不幸的是，我的主页是我的登录页面，有一个 HTML5 下拉菜单可以处理它。

登录服务

@Service("userDetailsService")
public class LoginServiceImpl implements UserDetailsService{
    @Autowired private UserDao userDao;
    @Autowired private Assembler assembler;

    @Override
    @Transactional
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
            UserDetails userDetails = null;
            User user = userDao.findByName(username);
            if(user == null) { throw new UsernameNotFoundException("Wrong username or password");} //Never specify which one was it exactly
        return assembler.buildUserFromUserEntity(user);
    }
}

安全应用程序上下文 xml

       <import resource="servlet-context.xml" />

<!-- Global Security settings -->
<security:global-method-security pre-post-annotations="enabled" />


<!-- Spring Security framework settings -->
<security:http use-expressions="true" auto-config="true" disable-url-rewriting="true" entry-point-ref="formAuthenticationEntryPoint">
    <security:session-management>
        <security:concurrency-control max-sessions="5" error-if-maximum-exceeded="false"/>
    </security:session-management>
    <security:intercept-url pattern="/*" requires-channel="any" access="permitAll" />
    <security:intercept-url pattern="/**" requires-channel="any" access="permitAll" />
    <security:custom-filter position="PRE_AUTH_FILTER" ref="siteminderFilter" />
</security:http>
<!-- queries to be run on data -->
<beans:bean id="formAuthenticationEntryPoint"
            class="org.springframework.security.web.authentication.Http403ForbiddenEntryPoint"
        />

<bean id="siteminderFilter" class="org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter">
    <property name="principalRequestHeader" value="ROLE_USER"/>
    <property name="authenticationManager" ref="authenticationManager"/>
</bean>

<bean id="preauthAuthProvider" class="org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider">
    <property name="preAuthenticatedUserDetailsService">
        <bean id="userDetailsServiceWrapper"  class="org.springframework.security.core.userdetails.UserDetailsByNameServiceWrapper">
            <property name="userDetailsService" ref="LoginServiceImplementation"/>
        </bean>
    </property>
</bean>

<bean id="LoginServiceImplementation" class="com.WirTauschen.service.LoginServiceImpl"></bean>

<security:authentication-manager alias="authenticationManager">
    <security:authentication-provider ref="preauthAuthProvider" />
</security:authentication-manager>

Answer 1

将此添加到您的 security-applicationContext.xml 文件中

<http pattern="/login" security="none"/>