项目环境：JDK7 + Maven3.04
0. 项目使用springmvc作为controller层
1. 引入spring-security
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-web</artifactId>
<version>4.0.1.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-config</artifactId>
<version>4.0.1.RELEASE</version>
</dependency>
2. 在spring context中添加namespace
<beans
...
xmlns:security="http://www.springframework.org/schema/security"
xsi:schemaLocation="...
http://www.springframework.org/schema/security
http://www.springframework.org/schema/security/spring-security-4.0.xsd">
3. 在spring context中添加filter chain配置
<bean id='swaggerFilter' class="com.hiv.web.swagger.SwaggerFilter">
<constructor-arg value='${hiv.swagger.enabled}' />
</bean>
<bean id='versionFilter' class="com.hiv.web.spring.VersionFilter">
<constructor-arg value='${project.build.version}' />
</bean>
<bean id="myfilterChainProxy" class="org.springframework.security.web.FilterChainProxy">
<security:filter-chain-map request-matcher="ant">
<security:filter-chain pattern="/js/*.js" filters="versionFilter" />
<security:filter-chain pattern="/api-docs" filters="swaggerFilter" />
<security:filter-chain pattern="/api-docs/**" filters="swaggerFilter" />
<security:filter-chain pattern="/swagger/**" filters="swaggerFilter" />
</security:filter-chain-map>
</bean>
4. 配置web.xml
<filter>
<filter-name>myfilterChainProxy</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
<init-param>
<param-name>targetFilterLifecycle</param-name>
<param-value>true</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>myfilterChainProxy</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
配置完成
参考资料：
http://www.springframework.org/schema/security/spring-security-4.0.xsd