Java spring security中auto-config=true有什么用

声明:本页面是StackOverFlow热门问题的中英对照翻译,遵循CC BY-SA 4.0协议,如果您需要使用它,必须同样遵循CC BY-SA许可,注明原文地址和作者信息,同时你必须将它归于原作者(不是我):StackOverFlow 原文地址: http://stackoverflow.com/questions/18609655/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me): StackOverFlow

提示:将鼠标放在中文语句上可以显示对应的英文。显示中英文
时间:2020-08-12 09:30:00  来源:igfitidea点击:

what is the use of auto-config=true in spring security

javaspringspring-security

提问by basith

what is the use of auto-config=true in spring security. In which scenario we should use this. what is the actual use of using auto-config=true ?

spring 安全中 auto-config=true 的用途是什么。在哪种情况下我们应该使用它。使用 auto-config=true 的实际用途是什么?

回答by soulcheck

auto-config="true"is equivalent to:

auto-config="true"相当于:

<http>
    <form-login />
    <http-basic />
    <logout />
</http>

so it gives you a very basic security configuration to boot.

所以它为您提供了一个非常基本的安全配置来启动。

Source: https://docs.spring.io/spring-security/site/docs/3.1.x/reference/springsecurity-single.html#ns-auto-config

来源:https: //docs.spring.io/spring-security/site/docs/3.1.x/reference/springsecurity-single.html#ns-auto-config

回答by Pranav Kumar

This is one of the cases where we use auto-config = true:

这是我们使用的情况之一auto-config = true

<http auto-config='true'>
  <intercept-url pattern="/**" access="ROLE_USER" />
</http>

This declaration means we want all URLs within our application to be secured, requiring the role ROLE_USER to access them. The element is the parent for all web-related namespace functionality. The element defines a pattern which is matched against the URLs of incoming requests using an ant path style syntax

这个声明意味着我们希望应用程序中的所有 URL 都受到保护,需要角色 ROLE_USER 来访问它们。该元素是所有与 Web 相关的命名空间功能的父元素。该元素定义了一个模式,该模式使用 ant 路径样式语法与传入请求的 URL 匹配

回答by SHIVA

auto-config='true' means for the intercept-url pattern the spring security provides the default login screen

auto-config='true' 表示对于intercept-url 模式,spring security 提供默认登录屏幕

回答by tomikmar

Spring Security Reference:

Spring 安全参考:

"Use of this attribute is not recommended. Use explicit configuration elements instead to avoid confusion."

“不建议使用此属性。使用显式配置元素来避免混淆。”

Source: https://docs.spring.io/spring-security/site/docs/3.2.x/reference/htmlsingle/html5/#nsa-http-attributes

来源:https: //docs.spring.io/spring-security/site/docs/3.2.x/reference/htmlsingle/html5/#nsa-http-attributes