source: EDIS/trunk/java/tracking-server-main/src/main/webapp/WEB-INF/config/security-config.xml@ 1252

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:security="http://www.springframework.org/schema/security"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:util="http://www.springframework.org/schema/util"
       xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
       http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-2.0.xsd">

    <bean class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
        <property name="location" value="classpath:strings.properties"/>
    </bean>

    <security:http entry-point-ref="formAuthenticationEntryPoint" access-denied-page="/login.html?error=true">
        <security:intercept-url pattern="/about.html" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
        <security:intercept-url pattern="/login.html*" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
        <security:intercept-url pattern="/logout.html*" filters="none"/>

        <security:intercept-url pattern="/**/*.swf" access="ROLE_USER"/>
        <security:intercept-url pattern="/**/*.xml" access="ROLE_USER"/>
        <security:intercept-url pattern="/**/*.html" access="ROLE_USER"/>

        <security:anonymous/>
    </security:http>

    <security:authentication-manager alias="authenticationManager"/>

    <bean id="vistaAuthenticationProvider"
          class="gov.va.med.edp.springframework.security.providers.vistalink.VistaAuthenticationProvider">
        <security:custom-authentication-provider/>
        <property name="userDetailsService" ref="vistaUserDetailsDao"/>
    </bean>

    <bean id="vistaUserDetailsDao"
          class="gov.va.med.edp.springframework.security.userdetails.vistalink.VistaLinkUserDetailService">
        <property name="applicationName" value="${app.name}"/>
        <property name="connectionFactoryLocator" ref="vistaLinkConnectionFactoryLocator"/>
    </bean>

    <bean id="formAuthenticationProcessingFilter"
          class="gov.va.med.edp.springframework.security.ui.vistalink.VistaAuthenticationProcessingFilter">
        <security:custom-filter position="AUTHENTICATION_PROCESSING_FILTER"/>
        <property name="authenticationManager" ref="authenticationManager"/>
        <property name="defaultTargetUrl" value="/"/>
    </bean>

    <bean id="formAuthenticationEntryPoint"
          class="org.springframework.security.ui.webapp.AuthenticationProcessingFilterEntryPoint">
        <property name="loginFormUrl" value="/login.html"/>
    </bean>

    <bean id="logoutFilter" class="org.springframework.security.ui.logout.LogoutFilter">
        <constructor-arg value="/"/>
        <constructor-arg>
            <list>
                <bean class="gov.va.med.edp.springframework.security.ui.vistalink.VistaLogoutHandler">
                    <property name="userDetailsService" ref="vistaUserDetailsDao"/>
                </bean>
                <bean class="org.springframework.security.ui.logout.SecurityContextLogoutHandler"/>
            </list>
        </constructor-arg>
        <property name="filterProcessesUrl" value="/logout.html"/>
    </bean>

    <bean id="vistaLinkConnectionFactoryLocator"
          class="gov.va.med.edp.vistalink.locator.VistaLinkConnectorConfigConnectionFactoryLocator">
        <property name="connectors" ref="vistaAccounts"/>
    </bean>

    <util:set id="vistaAccounts">
        <bean class="gov.va.med.edp.vistalink.locator.VistaLinkConnectorConfig">
            <property name="host" value="foo"/>
            <property name="name" value="FOO"/>
            <property name="primaryStation" value="500"/>
            <property name="accessCode" value="foo"/>
            <property name="verifyCode" value="bar"/>
        </bean>
    </util:set>
</beans>