<authentication-manager>

	    <authentication-provider>

	        <jdbc-user-service data-source-ref="dataSource"/>

	    </authentication-provider>

	</authentication-manager>

<?xml version="1.0" encoding="UTF-8"?>

<beans:beans xmlns="http://www.springframework.org/schema/security"

	xmlns:beans="http://www.springframework.org/schema/beans"

	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

	xsi:schemaLocation="http://www.springframework.org/schema/beans

    					http://www.springframework.org/schema/beans/spring-beans-3.0.xsd

    					http://www.springframework.org/schema/context

    					http://www.springframework.org/schema/context/spring-context-3.1.xsd

                		http://www.springframework.org/schema/tx

                		http://www.springframework.org/schema/tx/spring-tx-3.0.xsd

                		http://www.springframework.org/schema/security

                		http://www.springframework.org/schema/security/spring-security.xsd">

	<http auto-config='true'>

		<intercept-url pattern="/adminPage.jsp" access="ROLE_ADMIN" />

		<intercept-url pattern="/**" access="ROLE_USER" />

	</http>

	<!-- 数据源 -->

	<beans:bean id="dataSource" class="com.mchange.v2.c3p0.ComboPooledDataSource"

		destroy-method="close">

		<!-- 此为c3p0在spring中直接配置datasource c3p0是一个开源的JDBC连接池 -->

		<beans:property name="driverClass" value="com.mysql.jdbc.Driver" />

		<beans:property name="jdbcUrl"

			value="jdbc:mysql://localhost:3306/springsecuritydemo?useUnicode=true&characterEncoding=UTF-8" />

		<beans:property name="user" value="root" />

		<beans:property name="password" value="" />

		<beans:property name="maxPoolSize" value="50"></beans:property>

		<beans:property name="minPoolSize" value="10"></beans:property>

		<beans:property name="initialPoolSize" value="10"></beans:property>

		<beans:property name="maxIdleTime" value="25000"></beans:property>

		<beans:property name="acquireIncrement" value="1"></beans:property>

		<beans:property name="acquireRetryAttempts" value="30"></beans:property>

		<beans:property name="acquireRetryDelay" value="1000"></beans:property>

		<beans:property name="testConnectionOnCheckin" value="true"></beans:property>

		<beans:property name="idleConnectionTestPeriod" value="18000"></beans:property>

		<beans:property name="checkoutTimeout" value="5000"></beans:property>

		<beans:property name="automaticTestTable" value="t_c3p0"></beans:property>

	</beans:bean>

	<!-- 默认数据库对用户进行存储 -->

	<authentication-manager>

	    <authentication-provider>

	        <jdbc-user-service data-source-ref="dataSource"/>

	    </authentication-provider>

	</authentication-manager>

</beans:beans>

Spring Security默认情况下需要两张表，用户表和权限表。以下是mysql中的建表语句：

create table users(

    username varchar(50) not null primary key,

    password varchar(50) not null,

    enabled boolean not null

);

create table authorities (

    username varchar(50) not null,

    authority varchar(50) not null,

    constraint fk_authorities_users foreign key(username) references users(username)

);

create unique index ix_auth_username on authorities (username,authority);

插入数据语句：

insert into users(username,password,enabled) values('admin','admin',true);

insert into users(username,password,enabled) values('user','user',true);

insert into authorities(username,authority) values('admin','ROLE_ADMIN');

insert into authorities(username,authority) values('admin','ROLE_USER');

insert into authorities(username,authority) values('user','ROLE_USER');

　　上述sql中，我们创建了两个用户admin和user，其中admin拥有ROLE_ADMIN和ROLE_USER权限，而user只拥有ROLE_USER权限。这和我们上一章中的配置相同，因此本章实例的效果也和上一节完全相同，这里就不再赘述了。

结果请参考教程一的结果

---------------------
作者：AirMario
来源：CSDN
原文：https://blog.csdn.net/AirMario/article/details/53965765