Source Rebels» Spring http://www.sourcerebels.com/blog Por Edu Rodríguez Castillo Sat, 03 Jul 2010 06:03:44 +0000 en hourly 1 http://wordpress.org/?v=3.0 Spring MVC y Spring Security http://www.sourcerebels.com/blog/spring-mvc-y-spring-security/ http://www.sourcerebels.com/blog/spring-mvc-y-spring-security/#comments Sun, 13 Jun 2010 09:13:59 +0000 Edu http://www.sourcerebels.com/blog/?p=353 En este post voy a explicar cómo proteger una aplicación Spring MVC utilizando el módulo Spring Security. Se trata de una guía muy ràpida y para nada seria. Se parte de la base de que tenemos un proyecto web Maven recien generado :-)

Dependencias a añadir al fichero pom.xml de Maven.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring</artifactId>
            <version>2.5.6.SEC01</version>
        </dependency>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-webmvc</artifactId>
            <version>2.5.6.SEC01</version>
        </dependency>
        <dependency>
            <groupId>commons-lang</groupId>
            <artifactId>commons-lang</artifactId>
            <version>2.4</version>
        </dependency>
        <dependency>
            <groupId>javax.servlet</groupId>
            <artifactId>servlet-api</artifactId>
            <version>2.5</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-core</artifactId>
            <version>2.0.5.RELEASE</version>
            <type>jar</type>
            <scope>compile</scope>
        </dependency>

Modificaciones de /WEB-INF/web.xml

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

 
    <!-- Listener que inicializa el contexto de Spring -->
    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
    <!-- Ubicación del fichero de configuración de Spring -->
    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>/WEB-INF/applicationContext.xml</param-value>
    </context-param>
    <!-- Dispatcher Servlet -->
    <servlet>
        <servlet-name>springapp</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>springapp</servlet-name>
        <url-pattern>*.htm</url-pattern>
    </servlet-mapping>
    <!-- Filtro de Spring Security que intercepta las llamadas a las URL de
         la aplicación -->
    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

Contenido de /WEB-INF/applicationContext.xml

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:p="http://www.springframework.org/schema/p"
    xmlns:context="http://www.springframework.org/schema/context"
    xmlns:security="http://www.springframework.org/schema/security"
    xsi:schemaLocation="
        http://www.springframework.org/schema/beans 
        http://www.springframework.org/schema/beans/spring-beans-2.5.xsd
        http://www.springframework.org/schema/context 
        http://www.springframework.org/schema/context/spring-context-2.5.xsd
        http://www.springframework.org/schema/security
        http://www.springframework.org/schema/security/spring-security-2.0.4.xsd">
 
    <!-- Configuración del acceso a las diferentes URL de la aplicación en función del
         rol del usuario. En este caso toda la aplicación está protegida y se requiere
         de un usuario con rol ROLE_USER para acceder -->
    <security:http auto-config="true">
        <security:intercept-url pattern="/**" access="ROLE_USER" />
    </security:http>
 
    <!-- Algunos usuarios de prueba. Posteriormente podremos cambiar el servicio para
         que vaya a buscar la información de los usuarios a otro lugar (BBDD) -->
    <security:authentication-provider>
        <security:user-service>
            <security:user name="admin" password="admin" authorities="ROLE_USER, ROLE_ADMIN" />
            <security:user name="user1" password="user1" authorities="ROLE_USER" />
            <security:user name="user1" password="user1" authorities="ROLE_USER" />
        </security:user-service>
    </security:authentication-provider>
 
</beans>

Una vez hecho esto, al acceder a cualquier recurso de la aplicación se nos mostrará la pantalla de login por defecto de Spring Security. Otro día veremos cómo personalizar esta página de login. Os dejo con una captura de la página:

Un saludo

]]> http://www.sourcerebels.com/blog/spring-mvc-y-spring-security/feed/ 0 Spring Annotations Inject properties / Anotaciones Spring Inyectar properties http://www.sourcerebels.com/blog/spring-annotations-inject-properties-anotaciones-spring-inyectar-properties/ http://www.sourcerebels.com/blog/spring-annotations-inject-properties-anotaciones-spring-inyectar-properties/#comments Fri, 04 Dec 2009 23:24:47 +0000 Edu http://www.sourcerebels.com/blog/?p=239 applicationContext.xml:

File parameters.properties / Fichero parameters.properties:

MyComponent.path=/some/path

Spring component / Componente gestionado por Spring:

import javax.annotation.PostConstruct;
import org.springframework.stereotype.Component;
 
@Component("MyComponent")
public class MyComponent {
 
    private String path;
 
    @PostConstruct
    public void loadPath() {
 
        System.out.println("Loading from " + this.path);
    }
 
    public String getPath() {
        return path;
    }
 
    public void setPath(String path) {
        this.path = path;
    }
}
]]> http://www.sourcerebels.com/blog/spring-annotations-inject-properties-anotaciones-spring-inyectar-properties/feed/ 0 Simple Spring Proxy http://www.sourcerebels.com/blog/simple-spring-proxy/ http://www.sourcerebels.com/blog/simple-spring-proxy/#comments Mon, 23 Nov 2009 20:04:00 +0000 Edu http://www.sourcerebels.com/blog/?p=224 Simply a code I wrote today at my Spring Training / Simplemente un código que escribí hoy en el curso de Spring.

applicationContext.xml:

1
2
3
4
5
6
7
8
9
10

<?xml version="1.0" encoding="UTF-8" ?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.5.xsd">
 
           <bean id="postProcessor" class="com.sourcerebels.test.postprocessor.PostProcessor"/>
           <bean id="someBusinessRule" class="com.sourcerebels.test.postprocessor.SomeBusinessRule" lazy-init="true">
               <property name="message" value="someBusinessRule executed"/>
           </bean>
</beans>

Advice:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

package com.sourcerebels.test.postprocessor;
 
import java.lang.reflect.Method;
import org.springframework.aop.AfterReturningAdvice;
import org.springframework.aop.MethodBeforeAdvice;
 
public class TransactionAdvice implements MethodBeforeAdvice, AfterReturningAdvice {
 
    public void before(Method method, Object[] args, Object target) throws Throwable {
        System.out.println("Starting Transaction");
    }
 
    public void afterReturning(Object returnValue, Method method, Object[] args, Object target) throws Throwable {
        System.out.println("Commit Transaction");
    }
}

BusinessRule interface:

1
2
3
4
5
6

package com.sourcerebels.test.postprocessor;
 
public interface BusinessRule {
 
    void run();
}

SomeBusinessRule class:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

package com.sourcerebels.test.postprocessor;
 
public class SomeBusinessRule implements BusinessRule {
 
    private String message;
 
    public void run() {
        System.out.println(message);
    }
 
    public String getMessage() {
        return message;
    }
 
    public void setMessage(String message) {
        this.message = message;
    }
}

Postprocessor:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

package com.sourcerebels.test.postprocessor;
 
import org.springframework.aop.framework.ProxyFactory;
import org.springframework.beans.BeansException;
import org.springframework.beans.factory.config.BeanPostProcessor;
 
/**
 * @author edu@sourcerebels.com
 */
public class PostProcessor implements BeanPostProcessor {
 
    public Object postProcessBeforeInitialization(Object bean, String beanName) throws BeansException {
        System.out.println("postProcessBeforeInitialization");
        return bean;
    }
 
    public Object postProcessAfterInitialization(Object bean, String beanName) throws BeansException {
        System.out.println("postProcessAfterInitialization");
        if (bean instanceof BusinessRule) {
            System.out.println("building proxy object");
            ProxyFactory proxyFactory = new ProxyFactory(bean);
            proxyFactory.addInterface(BusinessRule.class);
            proxyFactory.addAdvice(new TransactionAdvice());
            return proxyFactory.getProxy();
        }
        return bean;
    }
}

Main:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

package com.sourcerebels.test.postprocessor;
 
import org.springframework.context.ApplicationContext;
import org.springframework.context.support.ClassPathXmlApplicationContext;
 
public class Main {
 
    public static void main(String[] args) {
 
        String[] paths = { "com/sourcerebels/test/postprocessor/applicationContext.xml" };
        ApplicationContext ctx = new ClassPathXmlApplicationContext(paths);
 
        BusinessRule negocio = (BusinessRule) ctx.getBean("someBusinessRule");
        negocio.run();
 
        negocio = (BusinessRule) ctx.getBean("someOtherBusinessRule");
        negocio.run();
    }
}
]]> http://www.sourcerebels.com/blog/simple-spring-proxy/feed/ 0 Spring MVC. File Upload / Subir ficheros al servidor. http://www.sourcerebels.com/blog/spring-mvc-file-upload-subir-ficheros-al-servidor/ http://www.sourcerebels.com/blog/spring-mvc-file-upload-subir-ficheros-al-servidor/#comments Sat, 21 Nov 2009 09:35:47 +0000 Edu http://www.sourcerebels.com/blog/?p=200 HTML code / Código HTML:

<form method="POST" enctype="multipart/form-data" action="./myControllerURL">
	<input type="file" name="file"/>
	<input type="submit" name="submit" value="File Upload - Subir fichero"/>
</form>

Spring configuration / Configuración Spring:

<bean id="multipartResolver"
	class="org.springframework.web.multipart.commons.CommonsMultipartResolver">
	<property name="maxUploadSize" value="100000000"/>
</bean>

Controller code / código del controlador:

MultipartHttpServletRequest multipartRequest = (MultipartHttpServletRequest) request;
 
MultipartFile file = multipartRequest.getFile("file");
 
InputStream inputStream = null;
OutputStream outputStream = null;
File tmpFile = null;
 
System.out.println("file.getOriginalFileName(): "
		+ file.getOriginalFilename());
System.out.println("size:" + file.getSize());
try {
 
	if (file.getSize() > 0) {
 
		tmpFile = File.createTempFile("document_", ".tmp");
 
		inputStream = file.getInputStream();
		outputStream = new FileOutputStream(tmpFile);
		int readBytes = 0;
		byte[] buffer = new byte[8192];
		while ((readBytes = inputStream.read(buffer, 0, 8192)) != -1) {
			outputStream.write(buffer, 0, readBytes);
		}
		outputStream.close();
		inputStream.close();
		System.out.println("Saved file: " + tmpFile.getAbsolutePath());
	}
 
} catch (IOException ioe) {
	// TODO - Manage the exception.
}
]]> http://www.sourcerebels.com/blog/spring-mvc-file-upload-subir-ficheros-al-servidor/feed/ 0