Tag: spring security

java.lang.IncompatibleClassChangeError：class org.springframework.core.type.classreading.ClassMetadataReadingVisitor: 我正在通过链接中的相同示例开发Spring MVC JQGrid示例： https ： //github.com/nurkiewicz/books 。当我部署此代码时，我发现以下错误即将发生。参考错误： java.lang.IncompatibleClassChangeError: class org.springframework.core.type.classreading.ClassMetadataReadingVisitor has interface org.springframework.asm.ClassVisitor as super class at java.lang.ClassLoader.defineClass1(Native Method) ~[na:1.8.0_45] at java.lang.ClassLoader.defineClass(ClassLoader.java:760) ~[na:1.8.0_45] at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142) ~[na:1.8.0_45] at org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappClassLoader.java:2957) ~[catalina.jar:7.0.59] at org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader.java:1210) ~[catalina.jar:7.0.59] at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1690) ~[catalina.jar:7.0.59] at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1571) ~[catalina.jar:7.0.59] at java.lang.ClassLoader.defineClass1(Native Method) ~[na:1.8.0_45] at java.lang.ClassLoader.defineClass(ClassLoader.java:760) ~[na:1.8.0_45] at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142) ~[na:1.8.0_45] at org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappClassLoader.java:2957) ~[catalina.jar:7.0.59] at org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader.java:1210) […]

设置Spring Security：从元素’security：http’开始发现无效内容: 我正在尝试配置这里找到的spring-security，并且似乎已经限制了我对XML文件如何工作的理解。按照说明我已经为applicationContext.xml添加了spring security，如下所示：那一步部署得很好。然后我去了web.xml并添加： springSecurityFilterChain org.springframework.web.filter.DelegatingFilterProxy springSecurityFilterChain /* 那仍然很好。然后我尝试添加其中我也尝试过在这两种情况下，当我尝试部署应用程序时，我看到了一个错误： Error occurred during deployment: Exception while deploying the app [OmegaRM] : org.xml.sax.SAXParseException; lineNumber: 53; columnNumber: 39; Deployment descriptor file WEB-INF/web.xml in archive [web]. cvc-complex-type.2.4.a: Invalid content was found starting with element ‘security:http’. One of ‘{“http://xmlns.jcp.org/xml/ns/javaee”:module-name, “http://xmlns.jcp.org/xml/ns/javaee”:description, “http://xmlns.jcp.org/xml/ns/javaee”:display-name, “http://xmlns.jcp.org/xml/ns/javaee”:icon, “http://xmlns.jcp.org/xml/ns/javaee”:distributable, “http://xmlns.jcp.org/xml/ns/javaee”:context-param, “http://xmlns.jcp.org/xml/ns/javaee”:filter, “http://xmlns.jcp.org/xml/ns/javaee”:filter-mapping, […]

警告：org.springframework.web.servlet.PageNotFound – 不支持请求方法’GET’: 启动服务器时出现此exception： HTTP Status 405 – Request method ‘GET’ not supported 我的控制器是： @Controller public class HomeController { private static final Logger logger = LoggerFactory.getLogger(HomeController.class); @RequestMapping(value = “/”, method = RequestMethod.POST) public String home(Locale locale, Model model) { logger.info(“Welcome home! The client locale is {}.”, locale); return “login”; } } 我真的不知道是什么问题，因为我是一个非常新的spring，甚至无法弄清楚问题是什么。有人可以指导我解决这个问题

Spring安全配置：IllegalStateException：BeanFactory未初始化或已关闭: 我正在为我已经运行的Spring MVC Web应用程序添加Spring Security，但我还没有能够使用它。我很沮丧配置。我把这个页面作为参考http://www.springbyexample.org/examples/simple-spring-security-webapp.html 。我得到的错误和其他相关代码如下：错误： GRAVE: Excepción enviando evento de contexto destruído a instancia de escuchador de clase org.springframework.web.context.ContextLoaderListener java.lang.IllegalStateException: BeanFactory not initialized or already closed – call ‘refresh’ before accessing beans via the ApplicationContext at org.springframework.context.support.AbstractRefreshableApplicationContext.getBeanFactory(AbstractRefreshableApplicationContext.java:172) at org.springframework.context.support.AbstractApplicationContext.destroyBeans(AbstractApplicationContext.java:1066) at org.springframework.context.support.AbstractApplicationContext.doClose(AbstractApplicationContext.java:1040) at org.springframework.context.support.AbstractApplicationContext.close(AbstractApplicationContext.java:988) at org.springframework.web.context.ContextLoader.closeWebApplicationContext(ContextLoader.java:556) at org.springframework.web.context.ContextLoaderListener.contextDestroyed(ContextLoaderListener.java:142) at org.apache.catalina.core.StandardContext.listenerStop(StandardContext.java:4819) at org.apache.catalina.core.StandardContext.stopInternal(StandardContext.java:5466) […]

Spring MVC Error 405上传文件时不支持请求方法’POST’: 我想我已经看到网上关于这个主题的每一篇文章，但我无法纠正这个错误:( 我有一个使用Spring Security和Spring Mvc的Web应用程序，我想创建一个表单来上传图像（你必须记录下来才能这样做）但是无论我用我在论坛上找到的代码扭曲我的代码，我都有一个错误405上载文件时不支持请求方法“POST” 这是我的applicationContext.xml：我的控制器： @Controller public class FileUploadController { @RequestMapping(value=”/bo/uploadImage”, method = RequestMethod.GET) public String uploadImage() { return “bo_uploadimage”; } @RequestMapping(value=”/bo/uploadImage”, method = RequestMethod.POST) public String uploadImage(@RequestParam(value = “file”)FileUploadBean file, BindException errors, Map model) { System.out.println(“#############################” + file); return “bo_uploadimage”; } } public class FileUploadBean{ private byte[] file; public void setFile(byte[] file) { […]

spring自定义注销filter在注销前执行一些操作？: 我正在使用Spring Security 3.0。我只需要在用户注销之前执行一些逻辑。是否可以通过重写Spring Security的LogoutFilter类来实现这一LogoutFilter ？

Spring security oauth2 – 无法访问/ oauth / token路由: 我刚刚开始通过以下教程为我的其他api创建一个身份validation服务器： https ： //jugbd.org/2017/09/19/implementing-oauth2-spring-boot-spring-security/ 。一切顺利，直到最后我无法访问/ oauth / token路由以进行身份validation。我想我需要更多的解释才能完全理解这种认证。谢谢你，Matthieu Meunier PS：这是我的课程： ResourceServerConfig.java @Configuration @EnableResourceServer public class ResourceServerConfig extends ResourceServerConfigurerAdapter { @Override public void configure(HttpSecurity http) throws Exception { http.authorizeRequests() .antMatchers(“/”).permitAll() .antMatchers(“/api/secure/**”).authenticated(); } } AuthorizationServerConfig.java @Configuration @EnableAuthorizationServer public class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter { @Autowired private AuthenticationManager authenticationManager; @Override public void configure(AuthorizationServerSecurityConfigurer serverSecurityConfigurer){ serverSecurityConfigurer .tokenKeyAccess(“permitAll()”) […]

如何在Spring Boot中覆盖Spring Security默认配置: 我对Spring Boot有一点问题。我非常喜欢Spring Boot，它是非常方便的工具，它让我可以专注于逻辑实现而不是bean配置。但是……我想覆盖默认的Spring Security配置。我创建了SecurityConfig类，Spring Boot在启动时加载了该类。我可以在地址/ bean上看到我的配置bean。但配置仍然是默认的（我猜）。 @Configuration @EnableWebSecurity public class SecurityConfiguration extends WebSecurityConfigurerAdapter { public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception{ auth.inMemoryAuthentication().withUser(“user”).password(“password”).roles(“USER”); } protected void cofigure(HttpSecurity http) throws Exception{ http.authorizeRequests() .antMatchers(“/app/”).permitAll() .anyRequest().authenticated() .and() .formLogin() .loginPage(“/login”) .permitAll() .and() .logout() .permitAll() .and() .csrf() .and() .exceptionHandling() .accessDeniedPage(“/error”); } } 我已使用username：user声明用户，并传递：password。我还宣称，Spring Security必须允许任何用户查看索引站点：localhost：port / app […]

当客户端和服务器在同一台计算机上时，Kerberos身份validation未运行: 尝试从运行jboss服务器的同一台计算机上访问应用程序时，我收到以下错误 org.springframework.security.authentication.BadCredentialsException: Kerberos validation not succesfull at org.springframework.security.extensions.kerberos.SunJaasKerberosTicketValidator.validateTicket(SunJaasKerberosTicketValidator.java:69) at org.springframework.security.extensions.kerberos.KerberosServiceAuthenticationProvider.authenticate(KerberosServiceAuthenticationProvider.java:86) at org.springframework.security.authentication.ProviderManager.doAuthentication(ProviderManager.java:120) at org.springframework.security.authentication.AbstractAuthenticationManager.authenticate(AbstractAuthenticationManager.java:48) at org.springframework.security.extensions.kerberos.web.SpnegoAuthenticationProcessingFilter.doFilter(SpnegoAuthenticationProcessingFilter.java:131) at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355) at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:79) at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355) at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:149) at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237) at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:235) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:190) at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92) at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126) at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at […]

如何保护注册页面免受多个恶意请求的侵害？: 我允许用户使用注册表在我的网站上注册。提交表单后，将生成令牌并通过电子邮件发送给用户，他们需要单击令牌链接以激活其帐户。我的问题是，如果我这样做，恶意代码仍然可以发送多个电子邮件到我的网站进行注册，我应该使用Captcha来保护网站还是有其他方法？