2012-07-05 34 views
5

我有我的spring-security.xml文件有问题。我想配置一些会话设置,首先创建登录表单来维护访客和登录用户。如何在Spring Security 3.1中正确配置http标记?

这是我spring-security.xml标题:

<beans xmlns="http://www.springframework.org/schema/beans" 
xmlns:security="http://www.springframework.org/schema/security" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:schemaLocation="http://www.springframework.org/schema/beans 
     http://www.springframework.org/schema/beans/spring-beans-3.0.xsd 
     http://www.springframework.org/schema/security 
     http://www.springframework.org/schema/security/spring-security-3.1.xsd"> 

正如你可以看到我使用Spring Security的在最新版本 - 3.1。当我尝试将模式版本更改为更低时,我遇到了错误。就3.1版本而言,我在Eclipse中只有黄色警告。

http标记看起来像:

<security:http auto-config='true'>  
    <security:intercept-url pattern="/wellcome*" access="ROLE_USER" /> 
    <security:form-login login-page="/login" default-target-url="/wellcome" authentication-failure-url="/loginfailed" /> 
    <security:logout logout-success-url="/logout" /> 
    <security:session-management invalid-session-url="/invalidsession" /> 
</security:http> 

而在此标记的第一行我有警告的长长的名单:

Multiple annotations found at this line: 
- Method 'setAuthenticationEntryPoint' is marked deprecated [config set: SpringMVC/web-context] 
- Method 'setSessionAuthenticationStrategy' is marked deprecated [config set: SpringMVC/web- 
context] 
- Method 'setUserAttribute' is marked deprecated [config set: SpringMVC/web-context] 
- Method 'setRequestCache' is marked deprecated [config set: SpringMVC/web-context] 
- Method 'setKey' is marked deprecated [config set: SpringMVC/web-context] 
- Method 'setSecurityContextRepository' is marked deprecated [config set: SpringMVC/web-context] 

Additionaly我也曾经在第三行一个警告:

Method 'setLoginFormUrl' is marked deprecated [config set: SpringMVC/web-context] 

你能否解释我应该如何正确定义我的在Spring Security 3.1中使用http标记的文件?

回答

6

编辑:现在这个问题已在春季安全3.1.2,所以如果你使用3.1或3.1.1,请升级到新版本。

原来的答复:

你的配置是好的。它是a known bug in Spring Security with STS in Eclipse(另见参考网址中提到的论坛话题)。

现在,您可以忽略警告,登录https://jira.springsource.org并投票处理问题并等到问题解决(或者如果您无法忍受这些警告,请移除项目的春天性质)。

0
<beans:beans xmlns:beans="http://www.springframework.org/schema/beans" 
    xmlns="http://www.springframework.org/schema/security" 
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p" 
    xmlns:util="http://www.springframework.org/schema/util" 
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd 
     http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-3.1.xsd 
     http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd"> 

<http auto-config="true" disable-url-rewriting="true" use-expressions="true"> 
     <form-login login-processing-url="/login" 
      login-page="/login.html" 
      default-target-url='/index.html' 
      always-use-default-target='true' 
/> 

<logout logout-url="/logout" /> 
+0

警告仍然相同。 – woyaru

相关问题