spring-Security3 DEMO 简单例子

package com.yeshun.service; import java.util.ArrayList; import java.util.Collection; import org.springframework.dao.DataAccessException; import org.springframework.security.core.GrantedAuthority; import org.springframework.security.core.authority.GrantedAuthorityImpl; import org.springframework.security.core.userdetails.User; import org.springframework.security.core.userdetails.UserDetails; import org.springframework.security.core.userdetails.UserDetailsService; import org.springframework.security.core.userdetails.UsernameNotFoundException; import com.yeshun.util.Md5Util; public class MyUserDetailService implements UserDetailsService { public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException, DataAccessException { //这里就不连接数据库了 手动验证用户 及赋予权限 /** * UserInfo user = userDao.getUser(username); * if(user == null){ * throw new UsernameNotFoundException("用户不存在，请重新输入！"); * }else{ * // to do * // 根据用户名得到用户的密码 ，得到用户的权限 * } */ /** * 这里默认密码 * 假如配置文件加上了<password-encoder hash="md5" /> * String password = Md5Util.MD5("123456"); */ String password = "123456"; Collection<GrantedAuthority> auths=new ArrayList<GrantedAuthority>(); GrantedAuthorityImpl auth=new GrantedAuthorityImpl("ROLE_ADMIN"); auths.add(auth); // GrantedAuthorityImpl auth1=new GrantedAuthorityImpl("ROLE_USER"); // auths.add(auth1); boolean enabled = true; boolean accountNonExpired = true; boolean credentialsNonExpired = true; boolean accountNonLocked = true; // User(String username, String password, boolean enabled, boolean accountNonExpired, // boolean credentialsNonExpired, boolean accountNonLocked, Collection<GrantedAuthority> authorities) User user = new User(username, password, enabled, accountNonExpired, credentialsNonExpired, accountNonLocked, auths); //假如 数据库是md5加密的 那在配置文件里加上<password-encoder hash="md5" /> return user; } }