spring security 替换默认的filter

覆盖默认配置的方法：<security:custom-filter position="alias"/>，position为相应filter的别名。

 对应关系：

 

CHANNEL_FILTER	ChannelProcessingFilter
CONCURRENT_SESSION_FILTER	ConcurrentSessionFilter
SESSION_CONTEXT_INTEGRATION_FILTER	HttpSessionContextIntegrationFilter
LOGOUT_FILTER	LogoutFilter
X509_FILTER	X509PreAuthenticatedProcessigFilter
PRE_AUTH_FILTER	Subclass of AstractPreAuthenticatedProcessingFilter
CAS_PROCESSING_FILTER	CasProcessingFilter
AUTHENTICATION_PROCESSING_FILTER	AuthenticationProcessingFilter
BASIC_PROCESSING_FILTER	BasicProcessingFilter
SERVLET_API_SUPPORT_FILTER	classname
REMEMBER_ME_FILTER	RememberMeProcessingFilter
ANONYMOUS_FILTER	AnonymousProcessingFilter
EXCEPTION_TRANSLATION_FILTER	ExceptionTranslationFilter
NTLM_FILTER	NtlmProcessingFilter
FILTER_SECURITY_INTERCEPTOR	FilterSecurityInterceptor
SWITCH_USER_FILTER	SwitchUserProcessingFilter

 

比如：

<bean id="logoutFilter"
    class="org.springframework.security.ui.logout.LogoutFilter">
    <security:custom-filter position="LOGOUT_FILTER" />
    <!-- 退出后指向的 URL -->
    <constructor-arg value="${security.logout_success_url}" />
    <constructor-arg>
        <list>
            <bean
                class="org.springframework.security.ui.logout.SecurityContextLogoutHandler" />\
        </list>
    </constructor-arg>
    <property name="filterProcessesUrl"
        value="${security.logout_processes_url}" />
</bean>

    <bean id="logoutFilter"
        class="org.springframework.security.ui.logout.LogoutFilter">
        <security:custom-filter position="LOGOUT_FILTER" />
        <!-- 退出后指向的 URL -->
        <constructor-arg value="${security.logout_success_url}" />
        <constructor-arg>
            <list>
                <bean
                    class="org.springframework.security.ui.logout.SecurityContextLogoutHandler" />\
            </list>
        </constructor-arg>
        <property name="filterProcessesUrl"
            value="${security.logout_processes_url}" />
    </bean>

这个filter将覆盖默认的logoutFilter