com.liuqi.vanasframework.security.access

类 SecurityInterceptor

java.lang.Object

org.springframework.security.access.intercept.AbstractSecurityInterceptor

com.liuqi.vanasframework.security.access.SecurityInterceptor

所有已实现的接口:

javax.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.ApplicationEventPublisherAware, org.springframework.context.MessageSourceAware

public class SecurityInterceptor
extends org.springframework.security.access.intercept.AbstractSecurityInterceptor
implements javax.servlet.Filter

类说明
系统安全拦截器

版本:

v1.0 , Create at 9:25 PM 2020/3/2

作者:

: alexliu

字段概要

从类继承的字段 org.springframework.security.access.intercept.AbstractSecurityInterceptor

logger, messages

构造器概要

构造器

构造器和说明
SecurityInterceptor()

方法概要

限定符和类型	方法和说明
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain filterChain)
Class<?>	getSecureObjectClass()
org.springframework.security.access.SecurityMetadataSource	obtainSecurityMetadataSource() 把 url 所需的权限类设置到拦截器中
void	setSecurityMetadataSource(org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource securityMetadataSource) 注入获取系统权限资源的适配器
void	setSystemAccessDecisionManager(SecurityDecisionManager securityDecisionManager) 注入 决策器，决策器全局只能一个，通过 set 方式注入

从类继承的方法 org.springframework.security.access.intercept.AbstractSecurityInterceptor

afterInvocation, afterPropertiesSet, beforeInvocation, finallyInvocation, getAccessDecisionManager, getAfterInvocationManager, getAuthenticationManager, getRunAsManager, isAlwaysReauthenticate, isRejectPublicInvocations, isValidateConfigAttributes, setAccessDecisionManager, setAfterInvocationManager, setAlwaysReauthenticate, setApplicationEventPublisher, setAuthenticationManager, setMessageSource, setPublishAuthorizationSuccess, setRejectPublicInvocations, setRunAsManager, setValidateConfigAttributes

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

从接口继承的方法 javax.servlet.Filter

destroy, init

构造器详细资料

SecurityInterceptor

public SecurityInterceptor()

方法详细资料

setSystemAccessDecisionManager

public void setSystemAccessDecisionManager(SecurityDecisionManager securityDecisionManager)

注入 决策器，决策器全局只能一个，通过 set 方式注入

参数:

securityDecisionManager - 决策器

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
                     javax.servlet.ServletResponse servletResponse,
                     javax.servlet.FilterChain filterChain)
              throws IOException,
                     javax.servlet.ServletException

指定者:

doFilter 在接口中 javax.servlet.Filter

抛出:

IOException

javax.servlet.ServletException

getSecureObjectClass

public Class<?> getSecureObjectClass()

指定者:

getSecureObjectClass 在类中 org.springframework.security.access.intercept.AbstractSecurityInterceptor

obtainSecurityMetadataSource

public org.springframework.security.access.SecurityMetadataSource obtainSecurityMetadataSource()

把 url 所需的权限类设置到拦截器中

指定者:

obtainSecurityMetadataSource 在类中 org.springframework.security.access.intercept.AbstractSecurityInterceptor

返回:

SecurityMetadataSource 资源

setSecurityMetadataSource

public void setSecurityMetadataSource(org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource securityMetadataSource)

注入获取系统权限资源的适配器

参数:

securityMetadataSource - 适配器