Spring Security Registration Tutorial – Spring安全注册教程

最后修改: 2015年 2月 22日

中文/混合/英文(键盘快捷键:t)

Building a full-fledged, production-ready registration for your web application is oh so much more than just putting together a simple registration page.

为你的网络应用程序建立一个成熟的、可用于生产的注册,这比仅仅把一个简单的注册页面放在一起要重要得多。

There are a lot of questions that need to be answered:

很多问题需要被回答。

  • How do I verify the email addresses of new users?
  • How do I properly and safely store user credentials?
  • What if a user forgets their password?
  • What about users changing their own password?
  • How strong should passwords be? How can I enforce some sensible defaults in the app so that my users have good, strong passwords?
  • What if I have more than one type of user? I need a good way to store roles and privileges.
  • What about security questions? Should I even have them?
  • How do I do all of this with good localization support? There are a lot of messages involved.