Home Explore Help
Register Sign In
github
/
spring-security
mirror of https://github.com/spring-projects/spring-security
2
0
Fork 0
Files Issues 0 Wiki
Browse Source

Add namespace support for anonymous requests. Remove unnecessary files from tutorial sample.

Ben Alex 18 years ago
parent
d086815d75
commit
53fca59301
3 changed files with 4 additions and 52 deletions
Unified View Show Diff Stats
  1. 4 3
      samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security-ns.xml
  2. 0 4
      samples/tutorial/src/main/webapp/WEB-INF/users.properties
  3. 0 45
      samples/tutorial/src/main/webapp/acegilogin.jsp

+ 4 - 3
samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security-ns.xml
View File 

@@ -10,21 +10,22 @@
 
     xmlns:beans="http://www.springframework.org/schema/beans"

     xmlns:beans="http://www.springframework.org/schema/beans"

     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

     xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd

     xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd

-http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.xsd">

+                        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.xsd">

 

 

     <http>

     <http>

         <intercept-url pattern="/secure/extreme/**" access="ROLE_SUPERVISOR"/>

         <intercept-url pattern="/secure/extreme/**" access="ROLE_SUPERVISOR"/>

         <intercept-url pattern="/secure/**" access="IS_AUTHENTICATED_REMEMBERED" />

         <intercept-url pattern="/secure/**" access="IS_AUTHENTICATED_REMEMBERED" />

         <intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />

         <intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />

 

 

-        <form-login />

+        <form-login />
 
+        <anonymous />

         <http-basic realm="SpringSecurityTutorialApp"  />

         <http-basic realm="SpringSecurityTutorialApp"  />

         <logout />

         <logout />

         <concurrent-session-control maxSessions="1" exceptionIfMaximumExceeded="true"/>

         <concurrent-session-control maxSessions="1" exceptionIfMaximumExceeded="true"/>

 

 

         <remember-me key="doesntmatter" tokenRepository="tokenRepo"/>

         <remember-me key="doesntmatter" tokenRepository="tokenRepo"/>

     </http>

     </http>

-

+ 

     <beans:bean name="tokenRepo" class="org.springframework.security.ui.rememberme.InMemoryTokenRepositoryImpl"/>

     <beans:bean name="tokenRepo" class="org.springframework.security.ui.rememberme.InMemoryTokenRepositoryImpl"/>

 

 

     <authentication-provider>

     <authentication-provider>

+ 0 - 4
samples/tutorial/src/main/webapp/WEB-INF/users.properties
View File 

@@ -1,4 +0,0 @@
 
-rod=koala,ROLE_SUPERVISOR

-dianne=emu,ROLE_USER

-scott=wombat,ROLE_USER

-peter=opal,disabled,ROLE_USER

+ 0 - 45
samples/tutorial/src/main/webapp/acegilogin.jsp
View File 

@@ -1,45 +0,0 @@
 
-<%@ taglib prefix='c' uri='http://java.sun.com/jstl/core' %>

-<%@ page import="org.springframework.security.ui.AbstractProcessingFilter" %>

-<%@ page import="org.springframework.security.ui.webapp.AuthenticationProcessingFilter" %>

-<%@ page import="org.springframework.security.AuthenticationException" %>

-

-<html>

-  <head>

-    <title>Login</title>

-  </head>

-

-  <body>

-    <h1>Login</h1>

-

-	<P>Valid users:

-	<P>

-	<P>username <b>rod</b>, password <b>koala</b> (supervisor)

-	<P>username <b>dianne</b>, password <b>emu</b> (normal user)

-	<p>username <b>scott</b>, password <b>wombat</b> (normal user)

-	<p>username <b>peter</b>, password <b>opal</b> (user disabled)

-	<p>

-

-    <%-- this form-login-page form is also used as the

-         form-error-page to ask for a login again.

-         --%>

-    <c:if test="${not empty param.login_error}">

-      <font color="red">

-        Your login attempt was not successful, try again.<BR><BR>

-        Reason: <%= ((AuthenticationException) session.getAttribute(AbstractProcessingFilter.SPRING_SECURITY_LAST_EXCEPTION_KEY)).getMessage() %>

-      </font>

-    </c:if>

-

-    <form action="<c:url value='j_spring_security_check'/>" method="POST">

-      <table>

-        <tr><td>User:</td><td><input type='text' name='j_username' <c:if test="${not empty param.login_error}">value='<c:out value="${ACEGI_SECURITY_LAST_USERNAME}"/>'</c:if>></td></tr>

-        <tr><td>Password:</td><td><input type='password' name='j_password'></td></tr>

-        <tr><td><input type="checkbox" name="_spring_security_remember_me"></td><td>Don't ask for my password for two weeks</td></tr>

-

-        <tr><td colspan='2'><input name="submit" type="submit"></td></tr>

-        <tr><td colspan='2'><input name="reset" type="reset"></td></tr>

-      </table>

-

-    </form>

-

-  </body>

-</html>