有时间了细看
http://sishuok.com/forum/blogPost/list/4307
http://www.daimami.com/program/636606
http://ss3ex.iteye.com/blog/452307
用户不可用时候触发这个exception：AuthenticationException
// ss3翻译
http://lengyun3566.iteye.com/blog/1109954
回去看，并搭建
http://static.springsource.org/spring-security/site/tutorial
http://stackoverflow.com/questions/9219739/spring-security-getting-the-acess-attributes-of-patterns-in-intercept-url
spring security登录无法用SecurityContextHolder.getContext().getAuthentication().getPrincipal()获得用户信息的原因：
http://blog.csdn.net/jjk_02027/article/details/6544889
http://blog.csdn.net/softwarehe/article/details/7711469
public class MyAuthenticationFailureHandler implements AuthenticationFailureHandler {
@Override
public void onAuthenticationFailure(HttpServletRequest request,
HttpServletResponse response, AuthenticationException exception)
throws IOException, ServletException {
System.out.println(exception.getMessage());
if("User is disabled".equals(exception.getMessage())) {
response.sendRedirect("/cdr/");
}
}
}
Java中的序列化：
http://www.cnblogs.com/549294286/archive/2012/08/09/2630466
http://hi.baidu.com/i_ccboy/item/35328d96c88f17ba83d2952e