带有 DelegatingFilterProxy 的 Spring Security [英] Spring Security with DelegatingFilterProxy

问题描述

我创建了一个弹簧安全过滤器，如下所示.

I have created a spring security Filter as below.

<!-- Enables Spring Security -->
    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>
        org.springframework.web.filter.DelegatingFilterProxy
    </filter-class>
</filter>

<filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>/*</url-pattern>
  </filter-mapping>
<!-- End Spring Security -->

<servlet>
    <servlet-name>remoting</servlet-name>
    <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-        
class>
    <init-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>/WEB-INF/remoting-servlet.xml</param-value>
    </init-param>
    <load-on-startup>2</load-on-startup>
</servlet>

<servlet-mapping>
    <servlet-name>remoting</servlet-name>
    <url-pattern>/remoting/*</url-pattern>
</servlet-mapping>

<servlet-mapping>
    <servlet-name>remoting</servlet-name>
    <url-pattern>/admin</url-pattern>
</servlet-mapping>

除此之外，我可以保证一切都是正确的.但我唯一的问题是，

And apart from this I can assure everything is correct. But only problem I have is,

当我访问链接 http://localhost:8080/myContext/remoting/Services 时，不会调用 Spring 过滤器进行身份验证，而是直接访问我的服务.

When I access a link http://localhost:8080/myContext/remoting/Services the Spring Filter is not called for authentication but directly it accesses my Services.

当我在 web.xml 中添加以下行时.它工作正常.

When I add the below line in web.xml. It works correctly.

<filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>/remoting/*</url-pattern>
</filter-mapping>

我有什么疑问，因为我的过滤器映射已经定义为/*.为什么我还要再定义一个过滤器映射.

What doubt I have is since my filter-mapping is already defined as /*. why should I again define one more filter-mapping.

推荐答案

当我在 spring-security.xml 中添加以下代码段时，它对我很成功

It worked for me successfully as I added the below snippet in the spring-security.xml

 <http auto-config="true">
    <intercept-url pattern="/**" access="ROLE_USER" />// pattern was modified to /**
    <http-basic/>
</http>

这篇关于带有 DelegatingFilterProxy 的 Spring Security的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！