国产探花免费观看_亚洲丰满少妇自慰呻吟_97日韩有码在线_资源在线日韩欧美_一区二区精品毛片,辰东完美世界有声小说,欢乐颂第一季,yy玄幻小说排行榜完本

首頁 > 學院 > 開發設計 > 正文

用JAAS 實現in Struts Web App(一)

2019-11-18 12:54:44
字體:
來源:轉載
供稿:網友

  JAAS參考資料中流行的文章是擴展JAAS實現類實例級授權
  
  但它是基于JDK1.3,與目前的JDK1.4,JDK1.5不兼容,例如其中的配置如下:
  
  The following assumes you are using JDK 1.3 and the files were extracted to
  the d:/JaasExample Directory. You will save some work by extracting the files
  to this directory otherwise you will have to modify the policy and the ResourceSecurity.xml
  policy files with the correct path names.
  
  1) Copy the jaas.jar and the jaasmod.jar to your JDK jre/lib/ext directory
  (i.e. D:/JDK1.3/jre/lib/ext).
  
  2) Add the following to the end of the java.security file located in JDK's
  jre/lib/security directory (i.e. D:/JDK1.3/jre/lib/security):
  auth.policy.PRovider=com.ibm.resource.security.auth.XMLPolicyFile
  
  3) Execute the run.bat file.
  
  1.4以后為policy.provider=PolicyFile。而且需要修改java.security文件
  
  我經過2天的嘔血奮戰實現了不改變java VM環境和Web server環境,在struts下實現JAAS。
  
  步驟如下:
  
  1. welcome.jsp, index.jsp, struts-config.xml
  
  <%@ taglib uri="/tags/struts-logic" prefix="logic" %>
  <logic:redirect forward="index"/>
  <%-- welcome.jspRedirect default requests to Welcome global ActionForward.By using a redirect, the user-agent will change address to match the path of our Welcome ActionForward. --%>
  
  index.jsp
  
  <%@ page contentType="text/Html; charset=UTF-8"%>
  <%@ taglib uri="/tags/struts-bean" prefix="bean"%>
  <%@ taglib uri="/tags/struts-html" prefix="html"%>
  <%@ taglib uri="/tags/struts-logic" prefix="logic"%>
  <html:html>
  <Title>Logon
  </Title>
  <body><html:form action="/LoginAction.do">
  <p>User ID:
  <input type="text" name="userID" value="tyrone" />
  <br>
  Passord: <input type="passWord" name="password" value="password"/>
  <br>
  <html:submit />
  </p>
  </html:form>
  </body>
  </html:html>
  
  struts-config.xml
  
  <?xml version="1.0" encoding="ISO-8859-1" ?>
  <!DOCTYPE struts-config PUBLIC
  "-//Apache Software Foundation//DTD Struts Configuration 1.2//EN"
  "http://jakarta.apache.org/struts/dtds/struts-config_1_2.dtd">
  <struts-config>
  <!-- ================================================ Form Bean Definitions -->
  <form-beans>
  <!--2 Login formbean-->
  <form-bean
  name="LoginForm"
  type="com.nova.colimas.web.form.LoginForm"/>
  </form-beans>
  <global-forwards>
  <!-- Default forward to "Welcome" action -->
  <!-- Demonstrates using index.jsp to forward -->
  <forward
  name="index"
  path="/index.do"/>
  </global-forwards><!-- =========================================== Action Mapping Definitions -->  <action-mappings>
  <!-- Default "Welcome" action -->
  <!-- Forwards to Welcome.jsp -->
  <action path="/index"
  type="com.nova.colimas.web.action.StartupServlet">
  <forward name="sUCcess" path="/pages/index.jsp"/>
  </action>
  <!-- 2 Login -->
  <action
  path="/LoginAction"
  type="com.nova.colimas.web.action.LoginAction"
  name="LoginForm"
  scope="request"
  input="/pages/indexcon.jsp"
  validate="true">
  <forward name="success" path="/pages/index.jsp"/>
  <forward name="failure" path="/pages/index.jsp"/>
  </action>
  </action-mappings></struts-config>
  
  2. 實現com.nova.colimas.web.action.StartupServlet用來初始化JAAS需要的系統屬性
  
  public class StartupServlet extends Action { public ActionForward execute(ActionMapping mapping,
  ActionForm form,
  HttpServletRequest request,
  HttpServletResponse response)
  throws Exception{
  
  // Initialization of the log
  //LoggerFactory.setFactory(new EPricerLogFactory ());
  //Log.info (this, "Startup of Settings application");
  initJAAS();   return mapping.findForward("success");
  }  //初始化JAAS需要的系統屬性  private void initJAAS(){
  //set env variable  //用于認證JAASConstants接口內保存login.config文件地址
  System.setProperty("java.security.auth.login.config",JAASConstants.AUTH_SECURITY_LOGINFILE);
  }
  }
  
  public interface JAASConstants {
  String AUTH_SECURITY_POLICYXMLFILE="D://MyProject//colimas//clms-web//colimas//security-policy.xml";
  String AUTH_SECURITY_LOGINFILE="D://MyProject//colimas//clms-web//colimas//login.config";
  String AUTH_SECURITY_MODULENAME="ColimasLogin";}
  
  Login.config文件內容:
  
  ColimasLogin
  {
  com.nova.colimas.security.auth.ColimasLoginModule required debug=true;
  };
  
  3.實現ColimasLoginModule登錄模塊
  
  /*
  * Created on 2005/07/01
  *
  * TODO To change the template for this generated file go to
  * Window - Preferences - Java - Code Style - Code Templates
  */package com.nova.colimas.security.auth;import java.util.*;
  import javax.security.auth.*;import javax.security.auth.callback.*;
  import javax.security.auth.login.*;
  import javax.security.auth.spi.LoginModule;//import java.security.*;
  //import org.w3c.dom.traversal.*;
  import org.w3c.dom.*;//import org.apache.XPath.*;
  /**
  * @author tyrone
  *
  * TODO To change the template for this generated type comment go to
  * Window - Preferences - Java - Code Style - Code Templates
  */public class ColimasLoginModule implements LoginModule {  private Subject subject;
  private CallbackHandler callbackHandler;
  private boolean debug = false;
  private boolean succeeded = false;
  private boolean commitSucceeded = false;
  private String username;
  private char[] passWord;
  /**
  * Initializes the <code>LoginModule</code>.
  *
  * @param subject the <code>Subject</code> to be authenticated.
  *
  * @param callbackHandler a <code>CallbackHandler</code> for
  * prompting and retrieving the userid and password from the user. *
  * @param sharedState shared <code>LoginModule</code> state.
  *
  * @param options options specified in the login configuration
  * file for this <code>LoginModule</code>.
  */  public void initialize(Subject subject, CallbackHandler callbackHandler, Map sharedState, Map options)
  {
  this.subject = subject;
  this.callbackHandler = callbackHandler;
  // initialize configuration options
  debug = "true".equalsIgnoreCase((String) options.get("debug"));
  }
  /**
  * Prompts the user for a userid and password.
  *
  * @return true if the authentication succeeded,
  * or false if this LoginModule should be ignored
  *
  * @exception FailedLoginException if the authentication fails.
  *
  * @exception LoginException if the <code>LoginModule<
  /code>
  * is unable to authenticate.
  */  public boolean login() throws LoginException {
  if (callbackHandler == null)
  throw new LoginException("Error: CallbackHandler cannot be null");
  Callback[] callbacks = new Callback[2];
  callbacks[0] = new NameCallback("userid: ");
  callbacks[1] = new PasswordCallback("password: ", false);
  try {
  callbackHandler.handle(callbacks);
  username = ((NameCallback) callbacks[0]).getName();
  char[] tmpPassword = ((PasswordCallback) callbacks[1]).getPassword();
  if (tmpPassword == null)
  {
  // treat a NULL password as an empty

發表評論 共有條評論
用戶名: 密碼:
驗證碼: 匿名發表
主站蜘蛛池模板: 兰西县| 姚安县| 当雄县| 磴口县| 康定县| 长岭县| 平江县| 荔浦县| 裕民县| 汝阳县| 邵阳县| 巨鹿县| 岳西县| 澜沧| 合川市| 诸城市| 灵丘县| 呼图壁县| 庐江县| 钦州市| 安塞县| 宜春市| 西华县| 四川省| 泰和县| 祁东县| 白河县| 禄丰县| 金乡县| 海口市| 茂名市| 临朐县| 青海省| 顺昌县| 满城县| 连云港市| 永胜县| 琼结县| 阳春市| 济南市| 东乌珠穆沁旗|