<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
	<context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>
			/WEB-INF/applicationContext.xml
            /WEB-INF/applicationContext-security.xml
        </param-value>
	</context-param>
	
	<servlet>
		<servlet-name>dispatcher</servlet-name>
		<servlet- class >org.springframework.web.servlet.DispatcherServlet</servlet- class >
		<load-on-startup> 1 </load-on-startup>
	</servlet>
	<servlet-mapping>
		<servlet-name>dispatcher</servlet-name>
		<url-pattern>*. do </url-pattern>
	</servlet-mapping>

	<filter>
		<filter-name>springSecurityFilterChain</filter-name>
		<filter- class >org.springframework.web.filter.DelegatingFilterProxy</filter- class >
	</filter>
	<filter-mapping>
		<filter-name>springSecurityFilterChain</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>
		
	<listener>
		<listener- class >org.springframework.web.context.ContextLoaderListener</listener- class >
	</listener>
	<listener>
        <listener- class >org.springframework.web.util.Log4jConfigListener</listener- class >
    </listener>
	<context-param>
        <param-name>log4jConfigLocation</param-name>
        <param-value>/WEB-INF/log4j.properties</param-value>
    </context-param>

	<welcome-file-list>
		<welcome-file>/WEB-INF/jsp/index.jsp</welcome-file>
	</welcome-file-list>
</web-app> 

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
	xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:jdbc="http://www.springframework.org/schema/jdbc" xmlns:lang="http://www.springframework.org/schema/lang"
	xmlns:util="http://www.springframework.org/schema/util"
	xsi:schemaLocation="http://www.springframework.org/schema/lang http://www.springframework.org/schema/lang/spring-lang-3.0.xsd
		http://www.springframework.org/schema/jdbc http://www.springframework.org/schema/jdbc/spring-jdbc-3.0.xsd
		http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.0.xsd
		http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
		http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-3.0.xsd">

	<http auto-config="true">
		<intercept-url pattern="/*" access="ROLE_USER" />
		<intercept-url pattern="/login.do" filters="none" />
		<form-login login-page="/login.do" />
	</http>



	<authentication-manager alias="authenticationManager">
		<authentication-provider>			
			<password-encoder hash="sha"/>
			<jdbc-user-service data-source-ref="dataSource" /> 
		</authentication-provider>
	</authentication-manager>
	
	<beans:bean id="dataSource"  class ="org.springframework.jdbc.datasource.DriverManagerDataSource">
		<beans:property name="driverClassName" value="com.mysql.jdbc.Driver" />
		<beans:property name="url" value="jdbc:mysql://localhost:3306/db" />
		<beans:property name="username" value="root" />
		<beans:property name="password" value="pass" />
	</beans:bean>
	
	<beans:bean id="userDetailsService"
		 class ="org.springframework.security.provisioning.JdbcUserDetailsManager">
		<beans:property name="dataSource" ref="dataSource" />
		<beans:property name="authenticationManager" ref="authenticationManager" />
		<beans:property name="enableAuthorities" value="true"/>
	</beans:bean>
	
	<beans:bean  class ="org.springframework.security.authentication.encoding.ShaPasswordEncoder" id="passwordEncoder"/>
	
</beans:beans>

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
		http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd">

	<bean id="viewResolver"
		 class ="org.springframework.web.servlet.view.InternalResourceViewResolver">
		<property name="prefix" value="/WEB-INF/jsp/" />
		<property name="suffix" value=".jsp" />
	</bean>

	<context:component-scan base- package ="my.test.auth" />
</beans>

<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>

<h1 align="center">Авторизация</h1>

<h3>Введите Ваш логин</h3>

<form action="j_spring_security_check" method="post">
	<label	 for ="j_username">Имя пользователя</label>: 
	<input id="j_username" name="j_username" size="20" maxlength="50" type="text" /> 
	<br />
	<label  for ="j_password">пароль </label>: 
	<input id="j_password" 	name="j_password" size="20" maxlength="50" type="password" /> 
	<br />
	<input type="submit" value="Login" />
</form>

 package  my.test.auth;

 import  org.springframework.stereotype.Controller;
 import  org.springframework.web.bind.annotation.RequestMapping;
 import  org.springframework.web.bind.annotation.RequestMethod;

 import  ru.xnull.web.BaseController;

@Controller
 public   class  LoginLogoutController{
	@RequestMapping(method = RequestMethod.GET, value = "/login.do")
	 public   void  home() {
		.....
	}
}

 package  my.test;

 import  java.util.HashSet;
 import  java.util.Set;

 import  org.springframework.beans.factory.annotation.Autowired;
 import  org.springframework.security.authentication.encoding.PasswordEncoder;
 import  org.springframework.security.core.GrantedAuthority;
 import  org.springframework.security.core.userdetails.User;
 import  org.springframework.security.core.userdetails.UserDetails;
 import  org.springframework.security.provisioning.UserDetailsManager;
 import  org.springframework.stereotype.Controller;
 import  org.springframework.web.bind.annotation.RequestMapping;
 import  org.springframework.web.bind.annotation.RequestMethod;


@Controller
 public   class  RegisterUserController{
	@Autowired
	 private  UserDetailsManager userDetailsService;
	@Autowired
	 private  PasswordEncoder passwordEncoder;

	@RequestMapping(method = RequestMethod.GET, value = "/register.do")
	 public   void  home() {
		GrantedAuthority auth =  new  GrantedAuthority() {
			 private   static   final   long  serialVersionUID = 1L;

			 public  String getAuthority() {
				 return  "ROLE_USER";
			}
		};
		Set<GrantedAuthority> set =  new  HashSet<GrantedAuthority>();
		set.add(auth);
		
		UserDetails details =  new  User("root",  passwordEncoder.encodePassword("root",  new  Object()), true, true, true, true, set);
		userDetailsService.createUser(details);
	}
}