标签：deprecated spring-security dependency-injection spring java

我正在使用Spring Security 3.1登录,但收到警告已弃用并且无法擦除,看来此配置适用于3.0版

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:beans="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans 
                    http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
                    http://www.springframework.org/schema/security 
                    http://www.springframework.org/schema/security/spring-security-3.1.xsd">

    <http auto-config="true" use-expressions="true">
        <intercept-url pattern="/pages/admin/**" access="hasRole('ROLE_ADMIN')" />
        <intercept-url pattern="/**" access="permitAll"/>
        <form-login login-page="/pages/login.jsf"/>
        <remember-me key="jsfspring-sec" services-ref="rememberMeServices"/>
        <logout
            invalidate-session="true"
            delete-cookies="JSESSIONID,SPRING_SECURITY_REMEMBER_ME_COOKIE"
            logout-success-url="/pages/login.jsf"/>
    </http>

    <authentication-manager alias="authenticationManager">
        <authentication-provider ref="rememberMeAuthenticationProvider">
        </authentication-provider>
        <authentication-provider>
            <user-service id="userDetailsService">
                <user authorities="ROLE_ADMIN" name="admin" password="admin" />
            </user-service>
        </authentication-provider>
    </authentication-manager>

    <beans:bean id="rememberMeServices"
        class="org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices">
        <beans:property  name="key" value="jsfspring-sec" />
        <beans:property  name="userDetailsService" ref="userDetailsService" />
        <beans:property  name="alwaysRemember" value="true" />
        <beans:property  name="tokenValiditySeconds" value="60" />
    </beans:bean>


    <beans:bean id="rememberMeAuthenticationProvider"
        class="org.springframework.security.authentication.RememberMeAuthenticationProvider">
        <beans:property name="key" value="jsfspring-sec"/>
    </beans:bean>

    <beans:bean id="rememberMeFilter"
        class="org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter">
        <beans:property name="rememberMeServices" ref="rememberMeServices"/>
        <beans:property name="authenticationManager" ref="authenticationManager" />
    </beans:bean>

</beans:beans>

我找不到使用Spring 3.1的方法.有人能帮我吗？最后三个bean已弃用,不胜感激.这是GitHub中存储库的URL：https://github.com/wmanriques/spring_template

解决方法:

由于Spring Security最近已在几个类中转移到构造函数注入,因此不建议使用默认构造函数.

/**
* @deprecated Use constructor injection
*/

现在需要将所需的组件注入builder-arg：

<beans:bean id="rememberMeServices"
            class="org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices">
    //First two with constructor - required elements
    <beans:constructor-arg value="jsfspring-sec"/>
    <beans:constructor-arg ref="userDetailsService"/>

    //Last two with properties
    <beans:property name="alwaysRemember" value="true"/>
    <beans:property name="tokenValiditySeconds" value="60" />
</beans:bean>

与接下来的2个豆相同：

<beans:bean id="rememberMeAuthenticationProvider"
            class="org.springframework.security.authentication.RememberMeAuthenticationProvider">
    <beans:constructor-arg value="jsfspring-sec"/>
</beans:bean>

<beans:bean id="rememberMeFilter"
            class="org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter">
    <beans:constructor-arg ref="authenticationManager"/>
    <beans:constructor-arg ref="rememberMeServices"/>
</beans:bean>

标签：deprecated,spring-security,dependency-injection,spring,java
来源： https://codeday.me/bug/20191031/1977615.html

本站声明： 1. iCode9 技术分享网（下文简称本站）提供的所有内容，仅供技术学习、探讨和分享；
2. 关于本站的所有留言、评论、转载及引用，纯属内容发起人的个人观点，与本站观点和立场无关；
3. 关于本站的所有言论和文字，纯属内容发起人的个人观点，与本站观点和立场无关；
4. 本站文章均是网友提供，不完全保证技术分享内容的完整性、准确性、时效性、风险性和版权归属；如您发现该文章侵犯了您的权益，可联系我们第一时间进行删除；
5. 本站为非盈利性的个人网站，所有内容不会用来进行牟利，也不会利用任何形式的广告来间接获益，纯粹是为了广大技术爱好者提供技术内容和技术思想的分享性交流网站。