spring4.2.3+mybatis+spring-security配置文件

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="http://java.sun.com/xml/ns/javaee"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
    version="3.0">
    <display-name>ranking-server</display-name>

    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>

    <context-param>
        <param-name>ES_Host</param-name>
        <param-value>localhost</param-value>
    </context-param>
    <context-param>
        <param-name>ES_Port</param-name>
        <param-value>9300</param-value>
    </context-param>

    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>classpath:spring-task.xml</param-value>
    </context-param>


    <!-- log4j -->
    <context-param>
        <param-name>webAppRootKey</param-name>
        <param-value>project.root</param-value>
        <!-- 用于定位log文件输出位置在web应用根目录下，log4j配置文件中写输出位置：log4j.appender.FILE.File=${project.root}/logs/project.log -->
    </context-param>
    <context-param>
        <!-- 载入log4j配置文件 -->
        <param-name>log4jConfigLocation</param-name>
        <param-value>classpath:props/log4j.properties</param-value>
    </context-param>
    <context-param>
        <!-- Spring刷新Log4j配置文件的间隔60秒,单位为millisecond -->
        <param-name>log4jRefreshInterval</param-name>
        <param-value>60000</param-value>
    </context-param>
    <listener>
        <listener-class>org.springframework.web.util.Log4jConfigListener</listener-class>
    </listener>



    <listener>
        <listener-class>com.thomsonreuters.ranking.listener.ContextListener</listener-class>
    </listener>


    <!-- 编码过滤器 -->
    <filter>
        <filter-name>characterEncodingFilter</filter-name>
        <filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>
        <init-param>
            <param-name>encoding</param-name>
            <param-value>UTF-8</param-value>
        </init-param>
        <init-param>
            <param-name>forceEncoding</param-name>
            <param-value>true</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>characterEncodingFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>




    <!-- SpringSecurity必须的filter -->
    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>
        classpath:spring-mvc.xml
        classpath:spring-security.xml
        classpath:spring-mybatis.xml
        </param-value>
    </context-param>

    <servlet>
        <servlet-name>spring</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <init-param>
            <param-name>contextConfigLocation</param-name>
            <param-value>classpath:spring-mvc.xml</param-value>
        </init-param>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>spring</servlet-name>
        <url-pattern>/</url-pattern>
    </servlet-mapping>
    <welcome-file-list>
        <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>
</web-app>

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p"
    xmlns:mvc="http://www.springframework.org/schema/mvc" xmlns:context="http://www.springframework.org/schema/context"
    xmlns:task="http://www.springframework.org/schema/task"
    xsi:schemaLocation="http://www.springframework.org/schema/beans
                        http://www.springframework.org/schema/beans/spring-beans-4.2.xsd  
                         http://www.springframework.org/schema/context
                        http://www.springframework.org/schema/context/spring-context-4.2.xsd   
                          http://www.springframework.org/schema/mvc
                          http://www.springframework.org/schema/mvc/spring-mvc-4.2.xsd
                         http://www.springframework.org/schema/task 
                        http://www.springframework.org/schema/task/spring-task-4.2.xsd">
    
    
    <!-- 自动扫描该包，使SpringMVC认为包下用了 @Controller @Server @Component注解的类是控制器 -->
    <context:component-scan base-package="com.thomsonreuters.ranking.controller" />
    <context:component-scan base-package="com.thomsonreuters.ranking.service" />

    <!-- 默认的注解映射的支持 -->
    <mvc:annotation-driven />

    <!-- 配置资源文件,防止被拦截 -->
    <mvc:resources location="/bootstrap/" mapping="/bootstrap/**" />
    <mvc:resources location="/js/" mapping="/js/**" />
    <mvc:resources location="/css/" mapping="/css/**" />
    <mvc:resources location="/html/" mapping="/html/**" />

    <!--定义拦截器 -->
    <mvc:interceptors>
        <!-- 使用bean定义一个Interceptor，直接定义在mvc:interceptors根下面的Interceptor将拦截所有的请求 -->
        <!-- 定义在mvc:interceptor下面的表示是对特定的请求才进行拦截的 -->
        <mvc:interceptor>
            <mvc:mapping path="/restApi/*" />
            <bean class="com.thomsonreuters.ranking.interceptor.AccessInterceptor" />
        </mvc:interceptor>
    </mvc:interceptors>
    <!--配置返回json  -->
    <bean
        class="org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter">
        <property name="messageConverters">
            <list>
                <ref bean="mappingJacksonHttpMessageConverter" />
            </list>
        </property>
    </bean>
    <bean id="mappingJacksonHttpMessageConverter"
        class="org.springframework.http.converter.json.MappingJackson2HttpMessageConverter">
        <property name="supportedMediaTypes">
            <list>
                <value>text/html;charset=UTF-8</value>
            </list>
        </property>
    </bean>


    <!-- 定义跳转的文件的前后缀 ，视图模式配置 -->
    <bean
        class="org.springframework.web.servlet.view.InternalResourceViewResolver">
        <property name="prefix" value="/WEB-INF/jsp/" />
        <property name="suffix" value=".jsp" />
        <property name="viewClass"
            value="org.springframework.web.servlet.view.JstlView" />
    </bean>

</beans>

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xmlns:security="http://www.springframework.org/schema/security"
    xsi:schemaLocation="http://www.springframework.org/schema/beans 
               http://www.springframework.org/schema/beans/spring-beans-4.2.xsd
            http://www.springframework.org/schema/security 
            http://www.springframework.org/schema/security/spring-security-4.0.xsd">
            
            
    <!-- restApi/getLawFirmInfo?language=en&seqid=100001 -->
    <!--  Spring-Security 的配置 -->
    <security:http auto-config="true" use-expressions="true">
        <security:access-denied-handler error-page="/user/denied"/>
        <security:intercept-url pattern="/main/common" access="hasRole(‘ROLE_USER‘)" />
        <security:intercept-url pattern="/main/admin" access="hasRole(‘ROLE_ADMIN‘)"/>
        <security:intercept-url pattern="/restApi/**" access="permitAll"/>
        <security:csrf disabled="true" />
        <security:form-login login-page="/user/login"
                             login-processing-url="/user/login.do"
                             authentication-failure-url="/user/login?error=true"
                             default-target-url="/main/common"/>
        <security:logout 
                logout-url="/user/logout"
                logout-success-url="/user/login" 
                />                     
    </security:http>
    
     <!-- 指定一个自定义的authentication-manager :customUserDetailsService -->
    <security:authentication-manager>
            <security:authentication-provider user-service-ref="customUserDetailsService">
                    <security:password-encoder ref="passwordEncoder"/>
            </security:authentication-provider>
    </security:authentication-manager>
    
    <!-- 对密码进行MD5编码 -->
    <bean class="org.springframework.security.authentication.encoding.Md5PasswordEncoder" id="passwordEncoder"/>
    
    <bean id="customUserDetailsService" class="com.thomsonreuters.ranking.service.CustomUserDetailsService"/>
</beans>

java.util.logging.FileHandler.encoding=UTF-8
log4j.rootLogger=debug , stdout , file ,err
  
### stdout ###
log4j.appender.stdout = org.apache.log4j.ConsoleAppender
log4j.appender.stdout.layout = org.apache.log4j.PatternLayout
log4j.appender.stdout.layout.ConversionPattern =[%-5p] %m%n  

### log file ###
log4j.appender.file = org.apache.log4j.DailyRollingFileAppender
log4j.appender.file.File = ../logs/rest_server.log
log4j.appender.file.Append = true
log4j.appender.file.Threshold = debug 
log4j.appender.file.layout = org.apache.log4j.PatternLayout
log4j.appender.file.layout.ConversionPattern = %d-[TS] %p %t %c - %m%n

###mybits
log4j.logger.com.ibatis=DEBUG
log4j.logger.com.ibatis.common.jdbc.SimpleDataSource=DEBUG
log4j.logger.com.ibatis.common.jdbc.ScriptRunner=DEBUG
log4j.logger.com.ibatis.sqlmap.engine.impl.SqlMapClientDelegate=DEBUG
log4j.logger.java.sql.Connection=DEBUG
log4j.logger.java.sql.Statement=DEBUG
log4j.logger.java.sql.PreparedStatement=DEBUG,stdout

### exception ###
log4j.appender.err = org.apache.log4j.DailyRollingFileAppender
log4j.appender.err.File = ../logs/err.log 
log4j.appender.err.Append = true
log4j.appender.err.Threshold = ERROR 
log4j.appender.err.layout = org.apache.log4j.PatternLayout
log4j.appender.err.layout.ConversionPattern = %d-[TS] %p %t %c - %m%n