ChannelProcessingFilter

通常最可能用来确保一个请求在https上发生，可以给ChannelDecisionManagerImpl赋值SecureChannelProcessor和InsecureChannelProcessor

一个典型的配置如下：

<bean id="channelProcessingFilter" class="org.springframework.security.web.access.channel.ChannelProcessingFilter">

      <property name="channelDecisionManager"  ref="channelDecisionManager"/>

  <property name="securityMetadataSource">

            <security:filter-security-metadata-source path-type="regex">

                <security:intercept-url pattern="\A/secure/.*\Z"access="REQUIRES_SECURE_CHANNEL"/>

                <security:intercept-url pattern="\A/login.jsp.*\Z"access="REQUIRES_SECURE_CHANNEL"/>

                <security:intercept-url pattern="\A/.*\Z"access="ANY_CHANNEL"/>

            </security:filter-security-metadata-source>

     </property>

</bean>

 

<bean id="channelDecisionManager"class="org.springframework.security.web.access.channel.ChannelDecisionManagerImpl">

      <property name="channelProcessors">

          <list>

             <ref bean="secureChannelProcessor"/>

              <ref bean="insecureChannelProcessor"/>

         </list>

       </property>

</bean>

<bean id="secureChannelProcessor"  class="org.springframework.security.web.access.channel.SecureChannelProcessor"/>

<bean id="insecureChannelProcessor"  class="org.springframework.security.web.access.channel.InsecureChannelProcessor"/>