Spring Security 学习笔记-securityContext过滤器过滤链学习

web.xml配置委托代理filter，filter-name默认与filter bean的名字保持一致。

 <filter>
         <filter-name>springSecurityFilterChain</filter-name>
         <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
     </filter>
     <filter-mapping>
         <filter-name>springSecurityFilterChain</filter-name>
         <url-pattern>/*</url-pattern>
     </filter-mapping>

过滤链代理配置

 <!-- 自定义Spring Security过滤链 -->
     <beans:bean id="springSecurityFilterChain"
         class="org.springframework.security.web.FilterChainProxy">
         <beans:constructor-arg>
             <beans:list>
                 <filter-chain pattern="/resources/**" filters="channelProcessingFilter" />
                 <filter-chain pattern="/login" filters="channelProcessingFilter" />
                 <filter-chain pattern="/" filters="channelProcessingFilter" />
                 <filter-chain pattern="/error" filters="channelProcessingFilter" />
                 <filter-chain pattern="/**"
                     filters="channelProcessingFilter,securityContextPersistenceFilter,usernamePasswordAuthenticationFilter,rememberMeAuthenticationFilter,logoutFilter,
                     exceptionTranslationFilter,concurrentSessionFilter,felicityFilterSecurityInterceptor" />
             </beans:list>
         </beans:constructor-arg>
     </beans:bean>

过滤链执行序列图