亚洲色大成网站WWW国产,亚洲乱码国产乱码精品精,91在线亚洲精品专区

acegi in spring

R.Zeus — Wed, 07 Mar 2007 05:24:00 GMT

when read the acgi.xml and according source code,I found the way spring read the value ,on the other hand,how spring choose the editor to resolve the value.
for example,the "filterInvocationDefinitionSource" properties,Spring will choose the class "FilterInvocationDefinitionSourceEditor" to solve the "filterInvocationDefinitionSource".u may notes that
the "FilterInvocationDefinitionSourceEditor" = "filterInvocationDefinitionSource" plus "editor" ignore the case.
That is exactly what Spring do.

in acegi , "filterInvocationDefinitionSource" use to store urls for filering,so when u understand the its struture ,u can
get the url for database,not explicitly.

for the key word " CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON",it means u must
set the properties name lower case,otherwise will be error.

and " PATTERN_TYPE_APACHE_ANT" means use class PathBasedFilterInvocationDefinitionMap,default use
class RegExpBasedFilterInvocationDefinitionMap.

R.Zeus 2007-03-07 13:24 发表评论

i18n-fuck the ReloadableResourceBundleMessageSource

R.Zeus — Mon, 23 Oct 2006 12:11:00 GMT

           class="org.springframework.context.support.ReloadableResourceBundleMessageSource">

            com/suzsoft/jportal/usermanagement/acegi/ApplicationMessages_zh_CN




this from the reference,but the ReloadableResourceBundleMessageSource seems never init and i don't konw how to make it work.

at the last ,I use

          class="org.springframework.context.support.ResourceBundleMessageSource">

            com.suzsoft.jportal.usermanagement.acegi.ApplicationMessages



ResourceBundleMessageSource:

setBasename

public void setBasename(String basename)

Set a single basename, following ResourceBundle conventions: It is a fully-qualified classname. If it doesn't contain a package qualifier (such as org.mypackage), it will be resolved from the classpath root.

Messages will normally be held in the /lib or /classes directory of a WAR. They can also be held in Jars on the class path. For example, a Jar in an application's manifest classpath could contain messages for the application.

ReloadableResourceBundleMessageSource:

setBasename

public void setBasename(String basename)

Set a single basename, following the basic ResourceBundle convention of not specifying file extension or language codes, but in contrast to ResourceBundleMessageSource referring to a Spring resource location: e.g. "WEB-INF/messages" for "WEB-INF/messages.properties", "WEB-INF/messages_en.properties", etc.

As of Spring 1.2.2, XML properties files are also supported: e.g. "WEB-INF/messages" will find and load "WEB-INF/messages.xml", "WEB-INF/messages_en.xml", etc as well. Note that this will only work on JDK 1.5+.

R.Zeus 2006-10-23 20:11 发表评论

acegi security is so perfect for login filter

R.Zeus — Thu, 19 Oct 2006 13:14:00 GMT

After use it first time in an project ,I found it so goodt!My project use struts+tiles+spring+acegi security+hibernate.
The below feature make much effect in my project:

1.when logout and then click 'back' button in the IE Toolbars to the last page which will be expired and auto redirect to appointed URL.
2.if client login the system but do nothing too long ,the session will be detected and expired!but as far I don't know how did the Acegi Security implements this.(this feature is seems in spring or tomcat,after set the sessionRegistor in Acegi Security ,it is not validate)
3.Acegi Security can control How the same username can logined in different ip!e.g. the same username can login many from ip or just can only login once.for single login,there are two case:the next login will be forbided ; the next login is permited and the first login auto out fo session.it is depend on the
security level!

one thing not resolved is that if there are two different user sign in on the same mache,the prev-user will auto session expired.How to achieve this?

after set property "sessionController",below is the variety:
1.auto login; if there is one user sign ,and then open a new IE to address a url need auth ,the url will redirect to the loginfromurl.but befor set this property, the url will open a page with the signed user.
2.if there is a url needed auth on the IE address(this may be left by last login and not logout),after server restar,the
url will redirect to the loginfromurl.before this url will continuate with last authed user.
3.session will not auto expire after long time idlesse.

R.Zeus 2006-10-19 21:14 发表评论

Acegi Security and Struts

R.Zeus — Tue, 17 Oct 2006 05:07:00 GMT

Acegi Secutiry is for URL-ROLE,and in Struts every method is mapping to a URL,so they are integrating is so perfect!

applicationContext-acegi-security.xml
---------------------------------------------------------------------------------------------------------------

              class="org.acegisecurity.util.FilterChainProxy">


                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                PATTERN_TYPE_APACHE_ANT
                /**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,securityContextHolderAwareRequestFilter,rememberMeProcessingFilter,anonymousProcessingFilter,exceptionTranslationFilter,filterInvocationInterceptor

class="org.acegisecurity.context.HttpSessionContextIntegrationFilter"/>

              class="org.acegisecurity.ui.logout.LogoutFilter">





                                        class="org.acegisecurity.ui.logout.SecurityContextLogoutHandler"/>

class="org.acegisecurity.ui.webapp.AuthenticationProcessingFilter">
ref="authenticationManager"/>

                          value="/login.jsp?login_error=1"/>

                          value="/j_acegi_security_check"/>

class="org.acegisecurity.wrapper.SecurityContextHolderAwareRequestFilter"/>

              class="org.acegisecurity.ui.rememberme.RememberMeProcessingFilter">
                          ref="authenticationManager"/>

              class="org.acegisecurity.providers.anonymous.AnonymousProcessingFilter">

                          value="anonymousUser,ROLE_ANONYMOUS"/>

              class="org.acegisecurity.ui.ExceptionTranslationFilter">

                                class="org.acegisecurity.ui.webapp.AuthenticationProcessingFilterEntryPoint">





                                class="org.acegisecurity.ui.AccessDeniedHandlerImpl">

class="org.acegisecurity.intercept.web.FilterSecurityInterceptor">

ref="authenticationManager"/>

                                          value="false"/>



                                                        class="org.acegisecurity.vote.AuthenticatedVoter"/>

                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                PATTERN_TYPE_APACHE_ANT
                /images/**=IS_AUTHENTICATED_ANONYMOUSLY
                /css/**=IS_AUTHENTICATED_ANONYMOUSLY
                /scripts/**=IS_AUTHENTICATED_ANONYMOUSLY
                /login.jsp=IS_AUTHENTICATED_ANONYMOUSLY
                /error.jsp=IS_AUTHENTICATED_ANONYMOUSLY

                /staff/**=ROLE_ADMIN_TEST

              class="org.acegisecurity.ui.rememberme.TokenBasedRememberMeServices">

              class="org.acegisecurity.providers.ProviderManager">



                                        class="org.acegisecurity.providers.anonymous.AnonymousAuthenticationProvider">


                                        class="org.acegisecurity.providers.rememberme.RememberMeAuthenticationProvider">

              class="org.acegisecurity.providers.dao.DaoAuthenticationProvider">


                                class="org.acegisecurity.providers.dao.cache.EhCacheBasedUserCache">

                                                class="org.springframework.cache.ehcache.EhCacheFactoryBean">

                                                                class="org.springframework.cache.ehcache.EhCacheManagerFactoryBean"/>

class="org.acegisecurity.providers.encoding.Md5PasswordEncoder"/>

                SELECT account,'ROLE_ADMIN' as authority FROM TB_STAFF WHERE account = ?




                SELECT account,password, 1 as enabled FROM TB_STAFF WHERE account = ?

class="org.acegisecurity.event.authentication.LoggerListener"/>

---------------------------------------------------------------------------------------------------------------

R.Zeus 2006-10-17 13:07 发表评论