Java Reference
In-Depth Information
<jsp-config>
<taglib>
<taglib-uri>/spring</taglib-uri>
<taglib-location>
/WEB-INF/tld/spring-form.tld
</taglib-location>
</taglib>
</jsp-config>
</web-app>
Now that I have shown how to set up the security gateway of the web application
and registered it with the web server, it's time to focus on the Spring side of things. On
the Spring side, the
FilterChainProxy
receives a request for security processing from the
gateway filter. The
FilterChainProxy
can then pass this request through a series of filters
configured in the Spring application context. Listing 6-3 shows this
FilterChainProxy
configuration.
ContextLoaderListener
uses this configuration file to start the root Spring
application context.
Listing 6-3.
applicationContext-security.xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN"
<beans>
<bean name="filterChainProxy"
class="org.springframework.security.util.FilterChainProxy">
<property name="filterInvocationDefinitionSource">
<value>
CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
PATTERN_TYPE_APACHE_ANT
/**=httpSessionContextIntegrationFilter,authenticationProcessingFilter,
å
anonymousProcessingFilter,exceptionTranslationFilter,
å
filterInvocationInterceptor
</value>
</property>
</bean>
</beans>
