小编mik*_*ike的帖子

我正在修改spring-security从spring security-3到spring security-4.x. 我按照这个链接: - 在这里输入链接描述

我的配置是: -

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xmlns:security="http://www.springframework.org/schema/security"
    xsi:schemaLocation="http://www.springframework.org/schema/beans 
            http://www.springframework.org/schema/beans/spring-beans-4.2.xsd
            http://www.springframework.org/schema/security 
             http://www.springframework.org/schema/security/spring-security-4.0.xsd">

    <!-- This is where we configure Spring-Security --> 
    <security:http  entry-point-ref="loginUrlAuthenticationEntryPoint"> 
    <security:custom-filter position="CONCURRENT_SESSION_FILTER" ref="concurrencyFilter" /> 
    <security:custom-filter position="FORM_LOGIN_FILTER" ref="myAuthFilter" /> 

    <security:session-management session-authentication-strategy-ref="sas"/> 
    <security:custom-filter ref="filter" before="FILTER_SECURITY_INTERCEPTOR" /> 
    <security:logout invalidate-session="true" logout-success-url="/login"/> 

    </security:http> 

    <bean id="loginUrlAuthenticationEntryPoint"  class="org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint"> 
    <property name="loginFormUrl" value="/login"/> 
    </bean> 

    <bean id="concurrencyFilter" class="org.springframework.security.web.session.ConcurrentSessionFilter"> 
    <property name="sessionRegistry" ref="sessionRegistry" /> 
    <property name="expiredUrl" value="/login" /> 
    </bean> 

    <bean id="myAuthFilter" class= "org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter"> 
    <property name="sessionAuthenticationStrategy" ref="sas" /> 
    <property name="authenticationManager" ref="authenticationManager" /> 
    <property name="authenticationFailureHandler" …