|
@@ -171,8 +171,8 @@
|
|
</section>
|
|
</section>
|
|
<section xml:id="nsa-form-login">
|
|
<section xml:id="nsa-form-login">
|
|
<title>The <literal><form-login></literal> Element</title>
|
|
<title>The <literal><form-login></literal> Element</title>
|
|
- <para> Used to add an <classname>UsernamePasswordAuthenticationProcessingFilter</classname> to
|
|
|
|
- the filter stack and an <classname>LoginUrlAuthenticationEntryPoint</classname> to the
|
|
|
|
|
|
+ <para> Used to add an <classname>UsernamePasswordAuthenticationFilter</classname> to the
|
|
|
|
+ filter stack and an <classname>LoginUrlAuthenticationEntryPoint</classname> to the
|
|
application context to provide authentication on demand. This will always take precedence
|
|
application context to provide authentication on demand. This will always take precedence
|
|
over other namespace-created entry points. If no attributes are supplied, a login page will
|
|
over other namespace-created entry points. If no attributes are supplied, a login page will
|
|
be generated automatically at the URL "/spring-security-login" <footnote><para>This feature
|
|
be generated automatically at the URL "/spring-security-login" <footnote><para>This feature
|
|
@@ -192,32 +192,32 @@
|
|
<section>
|
|
<section>
|
|
<title><literal>login-processing-url</literal></title>
|
|
<title><literal>login-processing-url</literal></title>
|
|
<para> Maps to the <literal>filterProcessesUrl</literal> property of
|
|
<para> Maps to the <literal>filterProcessesUrl</literal> property of
|
|
- <classname>UsernamePasswordAuthenticationProcessingFilter</classname>. The default value
|
|
|
|
- is "/j_spring_security_check". </para>
|
|
|
|
|
|
+ <classname>UsernamePasswordAuthenticationFilter</classname>. The default value is
|
|
|
|
+ "/j_spring_security_check". </para>
|
|
</section>
|
|
</section>
|
|
<section>
|
|
<section>
|
|
<title><literal>default-target-url</literal></title>
|
|
<title><literal>default-target-url</literal></title>
|
|
<para>Maps to the <literal>defaultTargetUrl</literal> property of
|
|
<para>Maps to the <literal>defaultTargetUrl</literal> property of
|
|
- <classname>UsernamePasswordAuthenticationProcessingFilter</classname>. If not set, the
|
|
|
|
- default value is "/" (the application root). A user will be taken to this URL after
|
|
|
|
- logging in, provided they were not asked to login while attempting to access a secured
|
|
|
|
- resource, when they will be taken to the originally requested URL. </para>
|
|
|
|
|
|
+ <classname>UsernamePasswordAuthenticationFilter</classname>. If not set, the default
|
|
|
|
+ value is "/" (the application root). A user will be taken to this URL after logging in,
|
|
|
|
+ provided they were not asked to login while attempting to access a secured resource, when
|
|
|
|
+ they will be taken to the originally requested URL. </para>
|
|
</section>
|
|
</section>
|
|
<section>
|
|
<section>
|
|
<title><literal>always-use-default-target</literal></title>
|
|
<title><literal>always-use-default-target</literal></title>
|
|
<para> If set to "true", the user will always start at the value given by
|
|
<para> If set to "true", the user will always start at the value given by
|
|
<literal>default-target-url</literal>, regardless of how they arrived at the login page.
|
|
<literal>default-target-url</literal>, regardless of how they arrived at the login page.
|
|
Maps to the <literal>alwaysUseDefaultTargetUrl</literal> property of
|
|
Maps to the <literal>alwaysUseDefaultTargetUrl</literal> property of
|
|
- <classname>UsernamePasswordAuthenticationProcessingFilter</classname>. Default value is
|
|
|
|
- "false". </para>
|
|
|
|
|
|
+ <classname>UsernamePasswordAuthenticationFilter</classname>. Default value is "false".
|
|
|
|
+ </para>
|
|
</section>
|
|
</section>
|
|
<section>
|
|
<section>
|
|
<title><literal>authentication-failure-url</literal></title>
|
|
<title><literal>authentication-failure-url</literal></title>
|
|
<para> Maps to the <literal>authenticationFailureUrl</literal> property of
|
|
<para> Maps to the <literal>authenticationFailureUrl</literal> property of
|
|
- <classname>UsernamePasswordAuthenticationProcessingFilter</classname>. Defines the URL
|
|
|
|
- the browser will be redirected to on login failure. Defaults to
|
|
|
|
- "/spring_security_login?login_error", which will be automatically handled by the automatic
|
|
|
|
- login page generator, re-rendering the login page with an error message. </para>
|
|
|
|
|
|
+ <classname>UsernamePasswordAuthenticationFilter</classname>. Defines the URL the browser
|
|
|
|
+ will be redirected to on login failure. Defaults to "/spring_security_login?login_error",
|
|
|
|
+ which will be automatically handled by the automatic login page generator, re-rendering
|
|
|
|
+ the login page with an error message. </para>
|
|
</section>
|
|
</section>
|
|
<section>
|
|
<section>
|
|
<title><literal>authentication-success-handler-ref</literal></title>
|
|
<title><literal>authentication-success-handler-ref</literal></title>
|
|
@@ -384,8 +384,7 @@
|
|
<title>The <literal><openid-login></literal> Element</title>
|
|
<title>The <literal><openid-login></literal> Element</title>
|
|
<para> Similar to <literal><form-login></literal> and has the same attributes. The
|
|
<para> Similar to <literal><form-login></literal> and has the same attributes. The
|
|
default value for <literal>login-processing-url</literal> is
|
|
default value for <literal>login-processing-url</literal> is
|
|
- "/j_spring_openid_security_check". An
|
|
|
|
- <classname>OpenIDUsernamePasswordAuthenticationProcessingFilter</classname> and
|
|
|
|
|
|
+ "/j_spring_openid_security_check". An <classname>OpenIDAuthenticationFilter</classname> and
|
|
<classname>OpenIDAuthenticationProvider</classname> will be registered. The latter
|
|
<classname>OpenIDAuthenticationProvider</classname> will be registered. The latter
|
|
requires a reference to a <interfacename>UserDetailsService</interfacename>. Again, this can
|
|
requires a reference to a <interfacename>UserDetailsService</interfacename>. Again, this can
|
|
be specified by Id, using the <literal>user-service-ref</literal> attribute, or will be
|
|
be specified by Id, using the <literal>user-service-ref</literal> attribute, or will be
|