我在 Spring 中创建身份验证服务。
在我的身份验证中，我需要连接到外部 webserwice，发送登录名和密码，以检查用户是否存在于另一个系统中。
我想做的方式是创建外部ProviderManarer。
我的spring-security.xml文件是：
<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:security="http://www.springframework.org/schema/security"
xmlns:beans="http://www.springframework.org/schema/beans"
xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans.xsd
http://www.springframework.org/schema/security
http://www.springframework.org/schema/security/spring-security-3.1.xsd">
<security:http pattern="/resources/**" security="none"/>
<security:http authentication-manager-ref="userAuthManager" disable-url-rewriting="true" auto-config="true" use-expressions="true">
<security:intercept-url pattern="/" access="permitAll"/>
<security:intercept-url pattern="/adminPanel/" access="permitAll"/>
<security:intercept-url pattern="/adminPanem/**" access="hasAnyRole('USER_ROLE', 'ADMIN_ROLE')"/>
<security:form-login login-page="/adminPanel" default-target-url="/adminPanel/panel"
authentication-failure-url="/adminPanel"/>
<security:logout logout-success-url="/adminPanel"/>
</security:http>
<bean id="userAuth" class="org.myapp.app.backEnd.auth.UserAuthentication"/>
<beans:bean id="userAuthManager" class="org.springframework.security.authentication.ProviderManager">
<beans:property name="providers">
<beans:list>
<beans:ref local="userAuth"/>
</beans:list>
</beans:property>
</beans:bean>
</beans>
我的测试认证提供者是：
public class UserAuthentication implements AuthenticationProvider{
@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
System.out.println(" test " );
System.out.println(authentication.getCredentials().toString());
List<GrantedAuthority> authorities = new ArrayList<GrantedAuthority>();
authorities.add(new SimpleGrantedAuthority("ADMIN_ROLE"));
return new UsernamePasswordAuthenticationToken("test", authentication.getCredentials(), authorities); //To change body of implemented methods use File | Settings | File Templates.
}
@Override
public boolean supports(Class<?> aClass) {
return false; //To change body of implemented methods use File | Settings | File Templates.
}
}
但是，有一个问题——我的配置没有调用public Authentication authenticate方法。
没有输出。
此外
我在 Spring 3.2 中看到了这一点：
<beans:bean id="userAuthManager" class="org.springframework.security.authentication.ProviderManager">
<beans:property name="providers">
<beans:list>
<beans:ref local="userAuth"/>
</beans:list>
</beans:property>
</beans:bean>
这：
<beans:property name="providers"> is depricated.
你知道如何在 Spring 3.2 中正确配置它吗？
如何创建正确的配置。