浅谈Acegi配置

1.密码加密

  原理解析：

(1)authenticationProcessingFilter 中会从你的登陆页面获得用户名和密码

 (2)userDetatilService.loadUserByUsername(String username)需要你根据用户名把用户的信息（

 用户名，密码，用户权限）放到你自己的UserDetail;

(3) 调用daoAuthenticationProvider中的passwordEncoder对页面密码进行加密，判断与数据库得到的密钥

     是否相等；

<bean class="org.acegisecurity.providers.dao.DaoAuthenticationProvider" id="daoAuthenticationProvider"></bean>
    <property name="userDetailsService">
      <ref local="userDetailsService"></ref>
    </property>
    <property name="passwordEncoder">
      <ref local="passwordEncoder"></ref>
      <!---->
    </property>

2.是权限

3.只能自己扩展objectDefinitionSource扩展方式

本人还是最总关心第三个问题

哪有写好了objectDefinitionSource的扩展？？

期待中。。。。。。

  且看配置：

   objectDefinitionSource ：  FilterInvocationDefinitionSource

  FilterInvocationDefinitionSourceEditor类

加载权限方法：

权限定义：

s参数值格式如下：

CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
        PATTERN_TYPE_APACHE_ANT
        /secure/extreme/**=ROLE_SUPERVISOR
        /secure/**=IS_AUTHENTICATED_REMEMBERED
        /**=IS_AUTHENTICATED_ANONYMOUSLY

public void setAsText(String s) throws IllegalArgumentException {
        FilterInvocationDefinitionDecorator source = new FilterInvocationDefinitionDecorator();

        if ((s == null) || "".equals(s)) {
            // Leave target object empty
            source.setDecorated(new RegExpBasedFilterInvocationDefinitionMap());
        } else {
            // Check if we need to override the default definition map
            if (s.lastIndexOf(DIRECTIVE_PATTERN_TYPE_APACHE_ANT) != -1) {
                source.setDecorated(new PathBasedFilterInvocationDefinitionMap());

                if (logger.isDebugEnabled()) {
                    logger.debug(("Detected " + DIRECTIVE_PATTERN_TYPE_APACHE_ANT
                        + " directive; using Apache Ant style path expressions"));
                }
            } else {
                source.setDecorated(new RegExpBasedFilterInvocationDefinitionMap());
            }

            if (s.lastIndexOf(DIRECTIVE_CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON) != -1) {
                if (logger.isDebugEnabled()) {
                    logger.debug("Detected " + DIRECTIVE_CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                        + " directive; Instructing mapper to convert URLs to lowercase before comparison");
                }

                source.setConvertUrlToLowercaseBeforeComparison(true);
            }

            BufferedReader br = new BufferedReader(new StringReader(s));
            int counter = 0;
            String line;

            List mappings = new ArrayList();

            while (true) {
                counter++;

                try {
                    line = br.readLine();
                } catch (IOException ioe) {
                    throw new IllegalArgumentException(ioe.getMessage());
                }

                if (line == null) {
                    break;
                }

                line = line.trim();

                if (logger.isDebugEnabled()) {
                    logger.debug("Line " + counter + ": " + line);
                }

                if (line.startsWith("//")) {
                    continue;
                }

                // Attempt to detect malformed lines (as per SEC-204)
                if (line.lastIndexOf(DIRECTIVE_CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON) != -1) {
                    // Directive found; check for second directive or name=value
                    if ((line.lastIndexOf(DIRECTIVE_PATTERN_TYPE_APACHE_ANT) != -1) || (line.lastIndexOf("=") != -1)) {
                        throw new IllegalArgumentException("Line appears to be malformed: " + line);
                    }
                }

                // Attempt to detect malformed lines (as per SEC-204)
                if (line.lastIndexOf(DIRECTIVE_PATTERN_TYPE_APACHE_ANT) != -1) {
                    // Directive found; check for second directive or name=value
                    if ((line.lastIndexOf(DIRECTIVE_CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON) != -1)
                        || (line.lastIndexOf("=") != -1)) {
                        throw new IllegalArgumentException("Line appears to be malformed: " + line);
                    }
                }

                // Skip lines that are not directives
                if (line.lastIndexOf('=') == -1) {
                    continue;
                }

                if (line.lastIndexOf("==") != -1) {
                    throw new IllegalArgumentException("Only single equals should be used in line " + line);
                }

                // Tokenize the line into its name/value tokens
                // As per SEC-219, use the LAST equals as the delimiter between LHS and RHS
                String name = StringSplitUtils.substringBeforeLast(line, "=");
                String value = StringSplitUtils.substringAfterLast(line, "=");

                if (!StringUtils.hasText(name) || !StringUtils.hasText(value)) {
                    throw new IllegalArgumentException("Failed to parse a valid name/value pair from " + line);
                }

                // Attempt to detect malformed lines (as per SEC-204)
                if (source.isConvertUrlToLowercaseBeforeComparison()
                    && source.getDecorated() instanceof PathBasedFilterInvocationDefinitionMap) {
                    // Should all be lowercase; check each character
                    // We only do this for Ant (regexp have control chars)
                    for (int i = 0; i < name.length(); i++) {
                        String character = name.substring(i, i + 1);

                        if (!character.toLowerCase().equals(character)) {
                            throw new IllegalArgumentException("You are using the "
                                + DIRECTIVE_CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                                + " with Ant Paths, yet you have specified an uppercase character in line: " + line
                                + " (character '" + character + "')");
                        }
                    }
                }

                FilterInvocationDefinitionSourceMapping mapping = new FilterInvocationDefinitionSourceMapping();
                mapping.setUrl(name);

                String[] tokens = org.springframework.util.StringUtils
                        .commaDelimitedListToStringArray(value);

                for (int i = 0; i < tokens.length; i++) {
                    mapping.addConfigAttribute(tokens[i].trim());
                }

                mappings.add(mapping);
            }
            source.setMappings(mappings);
        }

        setValue(source.getDecorated());
    }

  
=========================================

定义自己的类：

package common.spring.acegi.business;

import java.util.*;

import org.acegisecurity.*;
import org.acegisecurity.intercept.*;
import org.apache.commons.logging.LogFactory;
import org.apache.commons.logging.Log;
import org.acegisecurity.intercept.web.FilterInvocationDefinitionDecorator;
import org.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap;
import org.acegisecurity.intercept.web.FilterInvocationDefinitionSourceMapping;

import common.spring.acegi.vo.PreviligeVo;

public class MObjectDefinitionSource implements ObjectDefinitionSource {
    private MObjectDefinitionSource() {

    }

    private static MObjectDefinitionSource mobjectDefinitionSource;
    public MObjectDefinitionSource getInstance() {
        if (mobjectDefinitionSource == null) {
            mobjectDefinitionSource = new MObjectDefinitionSource();
        }
        return mobjectDefinitionSource;
    }

    private static final Log logger = LogFactory.getLog(
            MObjectDefinitionSource.class);
    private boolean lowercase = true; //采取的匹配模式
    //Object 是FillterInvocation
    public ConfigAttributeDefinition getAttributes(Object object) throws
            IllegalArgumentException {
        if (!init) {
            this.initConfigAttributeDefinitions();
        }
        return source.getAttributes(object);
    }

    public Iterator getConfigAttributeDefinitions() {
        if (!init) {
            this.initConfigAttributeDefinitions();
        }
        return source.getConfigAttributeDefinitions();
    }

    public boolean supports(Class clazz) {
        return true;
    }

    public void setLowercase(boolean lowercase) {
        this.lowercase = lowercase;
    }

    public void setPreviligeType(Integer[] previligeType) {
        this.previligeType = previligeType;
    }

    public boolean isLowercase() {
        return lowercase;
    }

    public Integer[] getPreviligeType() {
        return previligeType;
    }

    //需要加载的权限类型
    private Integer[] previligeType;
    private static FilterInvocationDefinitionDecorator source;
    private static boolean init = false;
    /*
     * 功能：重新更新权限列表
     **/
    public static void refreshSource() {
        mobjectDefinitionSource.initConfigAttributeDefinitions();
    }

    /*
     * 加载权限
     **/
    private void initConfigAttributeDefinitions() {
        source = null;
        //查找系统的权限
        source = new FilterInvocationDefinitionDecorator();
        source.setDecorated(new PathBasedFilterInvocationDefinitionMap());
        source.setConvertUrlToLowercaseBeforeComparison(this.lowercase);
        List mappings = new ArrayList();
        PreviligeVo vo[] = PreviligeFactory.loadPrevilige(this.previligeType);
        if (vo == null) {
            vo = new PreviligeVo[0];
        }
        for (int i = 0; i < vo.length; i++) {
            FilterInvocationDefinitionSourceMapping mapping = new
                    FilterInvocationDefinitionSourceMapping();
            mapping.setUrl(vo[i].getCode()); //其实就是url 如 /login.html
            mapping.setConfigAttributes(Arrays.asList(vo[i].getRole())); //login.html里的角色
            mappings.add(mapping);
        }
        source.setMappings(mappings);
        init = true;
    }

}