2022.10.18 Spring

sofia·2022년 11월 16일
Spring
0

Spring

목록 보기
11/11
post-thumbnail

Char 20. Security

보안 관련 프로젝트 생성

  • 보안 관련 라이브러리 추가
<dependency>
	<groupId>org.springframework.security</groupId>
	<artifactId>spring-security-config</artifactId>
	<version>3.2.5.RELEASE</version>
</dependency>

<dependency>
	<groupId>org.springframework.security</groupId>
	<artifactId>spring-security-core</artifactId>
	<version>3.2.5.RELEASE</version>
</dependency>

<dependency>
	<groupId>org.springframework.security</groupId>
	<artifactId>spring-security-web</artifactId>
	<version>3.2.5.RELEASE</version>
</dependency>

<dependency>
	<groupId>org.springframework.security</groupId>
	<artifactId>spring-security-taglibs</artifactId>
	<version>3.2.4.RELEASE</version>
</dependency>
  • web.xml 추가
param-value>
/WEB-INF/spring/root-context.xml
Spring bean configuration 파일 추가
</param-value>
<filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy
	</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
	</filter-mapping>
  • Spring bean configuration 파일 추가

<security:http auto-config="true">
Intercept 경로 추가
</security:http>

<security:authentication-manager>
	계정 설정
</security:authentication-manager>
  • 컨트롤러, 뷰 추가
@RequestMapping(인터셉트 당할 경로)
public String login(Locale locale, Model model) {
	뷰 이동
}

예제 1

login.jsp

<%@ page language="java" contentType="text/html; charset=EUC-KR"
    pageEncoding="EUC-KR"%>
<!DOCTYPE html>
<html>
<head>
<meta charset="EUC-KR">
<title>Insert title here</title>
</head>
<body>
	login.jsp입니다.
</body>
</html>

login.jsp

<%@ page language="java" contentType="text/html; charset=EUC-KR"
    pageEncoding="EUC-KR"%>
<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
<!DOCTYPE html>
<html>
<head>
<meta charset="EUC-KR">
<title>Insert title here</title>
</head>
<body>
	<h1>loginForm~!!</h1>
	<form method="post" action="j_spring_security_check">
		<!-- 로그인 실패시 -->
		<c:if test="${param.ng == '777'}">
			<p>
				Login NG! <br>			
			</p>
		</c:if>
		id2022 : <input type="text" name="j_username"><br>		
		id2022 : <input type="text" name="j_password"><br>		
	<!-- j_spring_security_check, j_password는 이미 그냥 정해져있는거임 -->
	<input type="submit" value="login2022"><br>		
	
	</form>
</body>
</html>

success.jsp

<%@ page language="java" contentType="text/html; charset=EUC-KR"
    pageEncoding="EUC-KR"%>
<!DOCTYPE html>
<html>
<head>
<meta charset="EUC-KR">
<title>Insert title here</title>
</head>
<body>
	success.jsp~~!!
</body>
</html>

welcome.jsp

<%@ page language="java" contentType="text/html; charset=EUC-KR"
    pageEncoding="EUC-KR"%>
<!DOCTYPE html>
<html>
<head>
<meta charset="EUC-KR">
<title>Insert title here</title>
</head>
<body>
	welcome.jsp입니다.
</body>
</html>

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">

	<!-- The definition of the Root Spring Container shared by all Servlets and Filters -->
	<context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>
		/WEB-INF/spring/root-context.xml
		/WEB-INF/spring/appServlet/security-context.xml
		</param-value>
	</context-param>
	
	<filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>
    
    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
	
	
	<!-- Creates the Spring Container shared by all Servlets and Filters -->
	<listener>
		<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
	</listener>

	<!-- Processes application requests -->
	<servlet>
		<servlet-name>appServlet</servlet-name>
		<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
		<init-param>
			<param-name>contextConfigLocation</param-name>
			<param-value>/WEB-INF/spring/appServlet/servlet-context.xml</param-value>
		</init-param>
		<load-on-startup>1</load-on-startup>
	</servlet>
		
	<servlet-mapping>
		<servlet-name>appServlet</servlet-name>
		<url-pattern>/</url-pattern>
	</servlet-mapping>

</web-app>

HomeController .java

package com.javalec.spring_security;

import java.text.DateFormat;
import java.util.Date;
import java.util.Locale;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;

/**
 * Handles requests for the application home page.
 */
@Controller
public class HomeController {
	
	private static final Logger logger = LoggerFactory.getLogger(HomeController.class);
	
	/**
	 * Simply selects the home view to render by returning its name.
	 */
	@RequestMapping(value = "/", method = RequestMethod.GET)
	public String home(Locale locale, Model model) {
		logger.info("Welcome home! The client locale is {}.", locale);
		
		Date date = new Date();
		DateFormat dateFormat = DateFormat.getDateTimeInstance(DateFormat.LONG, DateFormat.LONG, locale);
		
		String formattedDate = dateFormat.format(date);
		
		model.addAttribute("serverTime", formattedDate );
		
		return "home";
		
	}
	
	//추가 된 부분
	@RequestMapping("login.html")
	public String login() {
		return "security/login";
	}
	
	//추가 된 부분
	@RequestMapping("welcome.html")
	public String welcome() {
		
		return "security/welcome";
	}
	
	//추가 된 부분
	@RequestMapping("loginForm.html")
	public String loginForm() {
		
		return "security/loginForm";
	}
	//추가 된 부분
	@RequestMapping("success")
	public String success() {
		
		return "security/success";
	}
}

security-context.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:security="http://www.springframework.org/schema/security"
	xsi:schemaLocation="http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.2.xsd
		http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">

	<security:http auto-config="true">
		<!-- 꾸미기 -->
		<security:form-login login-page="/loginForm.html"
			authentication-failure-url="/loginForm.html?ng=777"
			default-target-url="/success"/>
			<!-- 로그인 실패시 authentication-failure-url / 로그인 성공하였을때 default-target-url-->
		<!-- /login.html*로 들어온 얘들을 가로챈다. -->
		<security:intercept-url pattern="/login.html*" access="ROLE_USER"/>
		<!-- 계정정보에서 ROLE_USER인 계정정보를 가로챈다. -->
		<security:intercept-url pattern="/welcome.html*" access="ROLE_ADMIN"/>
		<!-- 계정정보에서 ROLE_ADMIN인 계정정보를 가로챈다. -->
	</security:http>
	
	<!-- 계정정보  -->
	<security:authentication-manager>
		<security:authentication-provider>
			<security:user-service>
				<!-- 여기에 이제 계정 정보 들어감  -->
				<security:user name="user" password="123" authorities="ROLE_USER"/>
				<security:user name="admin" password="123" authorities="ROLE_ADMIN,ROLE_USER"/>
				<!-- 이런경우, ROLE_USER,ROLE_ADMIN 두개 다 로그인이 됨. -->
			</security:user-service>
		</security:authentication-provider>
	</security:authentication-manager>
</beans>

servlet-context.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/mvc"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:beans="http://www.springframework.org/schema/beans"
	xmlns:context="http://www.springframework.org/schema/context"
	xsi:schemaLocation="http://www.springframework.org/schema/mvc https://www.springframework.org/schema/mvc/spring-mvc.xsd
		http://www.springframework.org/schema/beans https://www.springframework.org/schema/beans/spring-beans.xsd
		http://www.springframework.org/schema/context https://www.springframework.org/schema/context/spring-context.xsd">

	<!-- DispatcherServlet Context: defines this servlet's request-processing infrastructure -->
	
	<!-- Enables the Spring MVC @Controller programming model -->
	<annotation-driven />

	<!-- Handles HTTP GET requests for /resources/** by efficiently serving up static resources in the ${webappRoot}/resources directory -->
	<resources mapping="/resources/**" location="/resources/" />

	<!-- Resolves views selected for rendering by @Controllers to .jsp resources in the /WEB-INF/views directory -->
	<beans:bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">
		<beans:property name="prefix" value="/WEB-INF/views/" />
		<beans:property name="suffix" value=".jsp" />
	</beans:bean>
	
	<context:component-scan base-package="com.javalec.spring_security" />
	
</beans:beans>
profile
sofia
이전 포스트

2022.10.17 Spring

0개의 댓글