FilesExpand file tree

 master

/

webSecurityConfig.xml

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

46 lines (44 loc) · 2.56 KB

 master

/

webSecurityConfig.xml

Copy path

Top

File metadata and controls

• Code
• Blame

46 lines (44 loc) · 2.56 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

<?xml version="1.0" encoding="UTF-8"?>

<beans:beans xmlns="http://www.springframework.org/schema/security"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:beans="http://www.springframework.org/schema/beans"

xmlns:mvc="http://www.springframework.org/schema/mvc"

xsi:schemaLocation="

http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.2.xsd

http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.0.xsd">

<http use-expressions="true">

<intercept-url pattern="/login*" access="permitAll" />

<intercept-url pattern="/logout*" access="permitAll" />

<intercept-url pattern="/signin/**" access="permitAll" />

<intercept-url pattern="/signup/**" access="permitAll" />

<intercept-url pattern="/user/registration*" access="permitAll" />

<intercept-url pattern="/regitrationConfirm*" access="permitAll" />

<intercept-url pattern="/expiredAccount*" access="permitAll" />

<intercept-url pattern="/registration*" access="permitAll" />

<intercept-url pattern="/badUser*" access="permitAll" />

<intercept-url pattern="/emailError*" access="permitAll" />

<intercept-url pattern="/resources/**" access="permitAll" />

<intercept-url pattern="/invalidSession*" access="isAnonymous()" />

<intercept-url pattern="/**" access="isAuthenticated()" />

<form-login login-page='/login.html'

authentication-failure-url="/login.html?error=true"

authentication-success-handler-ref="myAuthenticationSuccessHandler"

default-target-url="/homepage.html" />

<session-management invalid-session-url="/invalidSession.html"

session-fixation-protection="none" />

<logout invalidate-session="false" logout-success-url="/logout.html?logSucc=true"

logout-url="/j_spring_security_logout" delete-cookies="JSESSIONID" />

</http>

<beans:bean id="myAuthenticationSuccessHandler"

class="org.baeldung.security.MySimpleUrlAuthenticationSuccessHandler" />

<authentication-manager>

<authentication-provider ref="authProvider"/>

</authentication-manager>

<beans:bean id="authProvider" class="org.springframework.security.authentication.dao.DaoAuthenticationProvider">

<beans:property name="userDetailsService" ref="userDetailsService" /> <beans:property

name="passwordEncoder" ref="encoder" /> </beans:bean>

<beans:bean id="userDetailsService" class="org.baeldung.security.MyUserDetailsService" />

<beans:bean id="encoder"

class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder">

<beans:constructor-arg name="strength" value="11" />

</beans:bean>

</beans:beans>