如果用JSP可以用web.xml来进行配置
如<security-constraint>
<display-name>XXXX Management Constraint</display-name>
<web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<url-pattern>/admin/*</url-pattern>
<http-method>DELETE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
<http-method>PUT</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>myManager</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<realm-name>XXXX Form-Based Authentication Area</realm-name>
<form-login-config>
<form-login-page>/admin/login.jsp</form-login-page>
<form-error-page>/admin/error.jsp</form-error-page>
</form-login-config>
</login-config>
然后在服务器配置用户
如我是用的tomcat
在tomcat的conf目录下有一个tomcat-user.xml
可以添加一个role和user
<role rolename="myManager" />
<user username="xxxx" password="xxxx" roles="myManager" />
然后在JSP页面中：
<form action="<%=response.encodeURL("j_security_check")%>" method="POST">
<input type="text" name="j_username" class="textbox"/>
<input type="password" name="j_password" class="textbox"/>
<input type="submit" />
<input type="reset" /></form>
这样就可以了
