1     <bean id="dataSource"
2         class="org.springframework.jdbc.datasource.DriverManagerDataSource">
3         <property name="driverClassName" value="oracle.jdbc.driver.OracleDriver" />
4         <property name="url" value="jdbc:oracle:thin:@xxx.xxx.xxx.xxx:1521:orcl" />
5         <property name="username" value="cba" />
6         <property name="password" value="***" />
7     </bean>

1     <bean id="dataSource" class="org.springframework.jndi.JndiObjectFactoryBean">
2         <property name="jndiName">
3             <value>java:/ssoDS</value>
4         </property>
5     </bean>

1     <beans:bean id="userDetailsDao" class="infosky.ckg.sso.dao.impl.UserDetailsDaoImpl">
2         <beans:property name="dataSource" ref="dataSource" />
3         <!-- 登录错误尝试次数 -->
4         <beans:property name="maxAttempts" value="5" />
5     </beans:bean>

 1 package infosky.ckg.sso.dao;
 2 
 3 import infosky.ckg.sso.model.UserAttempts;
 4 
 5 public interface UserDetailsDao {
 6 
 7     void updateFailAttempts(String username);
 8 
 9     void resetFailAttempts(String username);
10 
11     UserAttempts getUserAttempts(String username);
12 
13 }

  1 package infosky.ckg.sso.dao.impl;
  2 
  3 import infosky.ckg.sso.dao.UserDetailsDao;
  4 import infosky.ckg.sso.model.UserAttempts;
  5 
  6 import java.sql.ResultSet;
  7 import java.sql.SQLException;
  8 import java.util.Date;
  9 
 10 import javax.annotation.PostConstruct;
 11 import javax.sql.DataSource;
 12 
 13 import org.springframework.beans.factory.annotation.Autowired;
 14 import org.springframework.dao.EmptyResultDataAccessException;
 15 import org.springframework.jdbc.core.RowMapper;
 16 import org.springframework.jdbc.core.support.JdbcDaoSupport;
 17 import org.springframework.stereotype.Repository;
 18 import org.springframework.security.authentication.LockedException;
 19 
 20 @Repository
 21 public class UserDetailsDaoImpl extends JdbcDaoSupport implements
 22         UserDetailsDao {
 23 
 24     private static final String SQL_USERS_UPDATE_LOCKED = "UPDATE t_users SET d_accountnonlocked = ? WHERE d_username = ?";
 25     private static final String SQL_USERS_COUNT = "SELECT COUNT(*) FROM t_users WHERE d_username = ?";
 26 
 27     private static final String SQL_USER_ATTEMPTS_GET = "SELECT d_username username,d_attempts attempts,d_lastmodified lastmodified FROM t_user_attempts WHERE d_username = ?";
 28     private static final String SQL_USER_ATTEMPTS_INSERT = "INSERT INTO t_user_attempts (d_username, d_attempts, d_lastmodified) VALUES(?,?,?)";
 29     private static final String SQL_USER_ATTEMPTS_UPDATE_ATTEMPTS = "UPDATE t_user_attempts SET d_attempts = d_attempts + 1, d_lastmodified = ? WHERE d_username = ?";
 30     private static final String SQL_USER_ATTEMPTS_RESET_ATTEMPTS = "UPDATE t_user_attempts SET d_attempts = 0, d_lastmodified = null WHERE d_username = ?";
 31 
 32     private int maxAttempts = 3;
 33 
 34     @Autowired
 35     private DataSource dataSource;
 36 
 37     @PostConstruct
 38     private void initialize() {
 39         setDataSource(dataSource);
 40     }
 41 
 42     @Override
 43     public void updateFailAttempts(String username) {
 44         UserAttempts user = getUserAttempts(username);
 45         if (user == null) {
 46             if (isUserExists(username)) {
 47                 // if no record, insert a new
 48                 getJdbcTemplate().update(SQL_USER_ATTEMPTS_INSERT,
 49                         new Object[] { username, 1, new Date() });
 50             }
 51         } else {
 52 
 53             if (isUserExists(username)) {
 54                 // update attempts count, +1
 55                 getJdbcTemplate().update(SQL_USER_ATTEMPTS_UPDATE_ATTEMPTS,
 56                         new Object[] { new Date(), username });
 57             }
 58 
 59             if (user.getAttempts() + 1 >= maxAttempts) {
 60                 // locked user
 61                 getJdbcTemplate().update(SQL_USERS_UPDATE_LOCKED,
 62                         new Object[] { false, username });
 63                 // throw exception
 64                 throw new LockedException("登录错误次数太多，该用户已被锁定!");
 65             }
 66 
 67         }
 68     }
 69 
 70     @Override
 71     public void resetFailAttempts(String username) {
 72         getJdbcTemplate().update(SQL_USER_ATTEMPTS_RESET_ATTEMPTS,
 73                 new Object[] { username });
 74 
 75     }
 76 
 77     @Override
 78     public UserAttempts getUserAttempts(String username) {
 79         try {
 80 
 81             UserAttempts userAttempts = getJdbcTemplate().queryForObject(
 82                     SQL_USER_ATTEMPTS_GET, new Object[] { username },
 83                     new RowMapper<UserAttempts>() {
 84                         public UserAttempts mapRow(ResultSet rs, int rowNum)
 85                                 throws SQLException {
 86 
 87                             UserAttempts user = new UserAttempts();
 88                             user.setUsername(rs.getString("username"));
 89                             user.setAttempts(rs.getInt("attempts"));
 90                             user.setLastModified(rs.getDate("lastModified"));
 91 
 92                             return user;
 93                         }
 94 
 95                     });
 96             return userAttempts;
 97 
 98         } catch (EmptyResultDataAccessException e) {
 99             return null;
100         }
101 
102     }
103 
104     private boolean isUserExists(String username) {
105 
106         boolean result = false;
107 
108         int count = getJdbcTemplate().queryForObject(SQL_USERS_COUNT,
109                 new Object[] { username }, Integer.class);
110         if (count > 0) {
111             result = true;
112         }
113 
114         return result;
115     }
116 
117     public int getMaxAttempts() {
118         return maxAttempts;
119     }
120 
121     public void setMaxAttempts(int maxAttempts) {
122         this.maxAttempts = maxAttempts;
123     }
124 
125 }