Spring AOP验证用户权限

1.新建一个Java普通工程，并需导入spring-aop.jar包； 2.建UserInfo类： package aop.secure; public class UserInfo {         private String userName;     private String password;         public UserInfo(String userName, String password){         this.userName = userName;         this.password = password;     }     public String getPassword() {         return password;     }     public String getUserName() {         return userName;     } } 3.建安全信息提示类SecureBean： package aop.secure; public class SecureBean {     public void writeSecureMessage(){         System.out.println("Every time I learn something new and it pushes some old stuff out of my brain.");     } } 4.建切面类SecurityAdvice实现org.springframework.aop.MethodBeforeAdvice： package aop.secure; import java.lang.reflect.Method; import org.springframework.aop.MethodBeforeAdvice; public class SecurityAdvice implements MethodBeforeAdvice {     private SecurityManager securityManager;         public SecurityAdvice(){         this.securityManager = new SecurityManager();     }     public void before(Method method, Object[] args, Object target) throws Throwable {         UserInfo user = securityManager.getLoggedOnUser();         if(user == null){             System.out.println("No user authenticated.");             throw new SecurityException("Method name: " + method.getName());         }else if("chigo".equals(user.getUserName()) && "chigo".equals(user.getPassword())){             System.out.println("OKAY!");         }else{             System.out.println("Logged in user is: " + user.getUserName());             throw new SecurityException("User " + user.getUserName() + " is not allowed access to method " + method.getName());         }     } } 5.建登陆与注销管理类SecurityManager： package aop.secure; public class SecurityManager {         private static ThreadLocal local = new ThreadLocal();         public void login(String userName, String password){         local.set(new UserInfo(userName,password));     }         public void logout(){         local.set(null);     }         public UserInfo getLoggedOnUser(){         return (UserInfo)local.get();     } } 6.最后建测试类SecurityExample： package aop.secure; import org.springframework.aop.framework.ProxyFactory; public class SecurityExample {     private static SecureBean getSecureBean(){         SecureBean sbean = new SecureBean();         SecurityAdvice sadvice = new SecurityAdvice();         ProxyFactory pf = new ProxyFactory();         pf.setTarget(sbean);         pf.addAdvice(sadvice);         SecureBean factory = (SecureBean)pf.getProxy();         return factory;     }         public static void main(String[] args) {         SecurityManager mgr = new SecurityManager();         SecureBean sbean = getSecureBean();                 mgr.login("chigo","chigo");         sbean.writeSecureMessage();         mgr.logout();                 try{             mgr.login("kkk","");             sbean.writeSecureMessage();         }catch(SecurityException ex){             System.out.println("Exception caught: " + ex.getMessage());         }finally{             mgr.logout();         }                 try{             sbean.writeSecureMessage();         }catch(SecurityException ex){             System.out.println("Exception caught: " + ex.getMessage());         }     } }