Configuring Spring Security
To configure Spring Security, first we need to configure a filter in the web deployment descriptor
(web.xml). Listing 17-57 shows the code snippet you need to add to the web.xml file.
Listing 17-57. Configure Spring Security Filter
<?xml version="1.0" encoding="UTF-8"?>
<!-- Other code omitted -->
<!-- Spring Security Configuration -->
<filter>
<filter-name>springSecurityFilterChain</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>
<filter-mapping>
<filter-name>springSecurityFilterChain</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<!-- Other code omitted -->
</web-app>
In Listing 17-57, the filter for Spring Security is highlighted in bold. The next step is to define the
Spring Security context, which will be imported by the root WebApplicationContext configuration file.
Listing 17-58 shows the configuration file (/WEB-INF/spring/security-context.xml).
Listing 17-58. Spring Security Context Configuration
<?xml version="1.0" encoding="UTF-8"?>
<http use-expressions="true">
<intercept-url pattern='/*' access='permitAll' />
<form-login login-page="/contacts" authentication-failure-url="/security/loginfail"
default-target-url="/contacts" />
<logout logout-success-url="/contacts"/>
</http>
<authentication-manager>
<authentication-provider>
<user-service>
<user name="user" password="user" authorities="ROLE_USER" />
</user-service>
Search WWH :
