springframework:security

차이

문서의 선택한 두 판 사이의 차이를 보여줍니다.

차이 보기로 링크

--- springframework:security [2013/01/23 11:57]
kwon37xi [Session 폭증 문제]
+++ springframework:security [2021/11/02 08:57] (현재)
kwon37xi
@@ 줄 21: / 줄 21: @@
   <http ... create-session="never">
 </code>
-이렇게 하면 [[UsernamePasswordAuthenticationFilter|http://static.springsource.org/spring-security/site/docs/3.0.x/apidocs/org/springframework/security/web/authentication/UsernamePasswordAuthenticationFilter.html]]의 ''allowSessionCreation'' 값 등이 false로 변경된다.
+이렇게 하면 [[http://static.springsource.org/spring-security/site/docs/3.0.x/apidocs/org/springframework/security/web/authentication/UsernamePasswordAuthenticationFilter.html|UsernamePasswordAuthenticationFilter]]의 ''allowSessionCreation'' 값 등이 false로 변경된다.
 ===== Expression Handler =====
@@ 줄 111: / 줄 111: @@
 <c:remove var="SPRING_SECURITY_LAST_EXCEPTION" scope="session"/>
 </code>
+===== Session 직접 구현 =====
+  * ConcurrentSessionFilter -> SecurityContextRepository
+===== @AuthenticationPrincipal =====
+  * [[https://www.javacodegeeks.com/2016/09/injecting-authenticated-user-spring-mvc-controllers.html|Injecting authenticated user into Spring MVC @Controllers]]
+  * Controller 에 로그인 사용자 객체를 주입할 수 있다.
+===== 참고 =====
+  * [[http://www.javabeat.net/spring-security-tutorial/|Spring Security Tutorial]]
+  * [[https://www.baeldung.com/spring-security-oauth2-enable-resource-server-vs-enable-oauth2-sso|OAuth2 - @EnableResourceServer vs @EnableOAuth2Sso | Baeldung]]
+  * [[https://javatechonline.com/how-to-implement-security-in-spring-boot-project/|How to implement Security in Spring Boot Project? | Making Java easy to learn]]
+  * [[https://www.baeldung.com/spring-session|Guide to Spring Session | Baeldung]]

springframework/security.1358909837.txt.gz · 마지막으로 수정됨: 2013/01/23 11:57 저자 kwon37xi