| 1 | <?xml version="1.0" encoding="UTF-8"?>
|
|---|
| 2 | <beans xmlns="http://www.springframework.org/schema/beans"
|
|---|
| 3 | xmlns:security="http://www.springframework.org/schema/security"
|
|---|
| 4 | xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:util="http://www.springframework.org/schema/util"
|
|---|
| 5 | xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
|
|---|
| 6 | http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-2.0.xsd">
|
|---|
| 7 |
|
|---|
| 8 | <bean class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
|
|---|
| 9 | <property name="location" value="classpath:strings.properties"/>
|
|---|
| 10 | </bean>
|
|---|
| 11 |
|
|---|
| 12 | <security:http entry-point-ref="formAuthenticationEntryPoint" access-denied-page="/login.html?error=true">
|
|---|
| 13 | <security:intercept-url pattern="/about.html" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
|
|---|
| 14 | <security:intercept-url pattern="/login.html*" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
|
|---|
| 15 | <security:intercept-url pattern="/logout.html*" filters="none"/>
|
|---|
| 16 |
|
|---|
| 17 | <security:intercept-url pattern="/**/*.swf" access="ROLE_USER"/>
|
|---|
| 18 | <security:intercept-url pattern="/**/*.xml" access="ROLE_USER"/>
|
|---|
| 19 | <security:intercept-url pattern="/**/*.html" access="ROLE_USER"/>
|
|---|
| 20 |
|
|---|
| 21 | <security:anonymous/>
|
|---|
| 22 | </security:http>
|
|---|
| 23 |
|
|---|
| 24 | <security:authentication-manager alias="authenticationManager"/>
|
|---|
| 25 |
|
|---|
| 26 | <bean id="vistaAuthenticationProvider"
|
|---|
| 27 | class="gov.va.med.edp.springframework.security.providers.vistalink.VistaAuthenticationProvider">
|
|---|
| 28 | <security:custom-authentication-provider/>
|
|---|
| 29 | <property name="userDetailsService" ref="vistaUserDetailsDao"/>
|
|---|
| 30 | </bean>
|
|---|
| 31 |
|
|---|
| 32 | <bean id="vistaUserDetailsDao"
|
|---|
| 33 | class="gov.va.med.edp.springframework.security.userdetails.vistalink.VistaLinkUserDetailService">
|
|---|
| 34 | <property name="applicationName" value="${app.name}"/>
|
|---|
| 35 | <property name="rpcTemplate" ref="vistaLinkRpcTemplate"/>
|
|---|
| 36 | </bean>
|
|---|
| 37 |
|
|---|
| 38 | <bean id="formAuthenticationProcessingFilter"
|
|---|
| 39 | class="gov.va.med.edp.springframework.security.ui.vistalink.VistaAuthenticationProcessingFilter">
|
|---|
| 40 | <security:custom-filter position="AUTHENTICATION_PROCESSING_FILTER"/>
|
|---|
| 41 | <property name="authenticationManager" ref="authenticationManager"/>
|
|---|
| 42 | <property name="defaultTargetUrl" value="/"/>
|
|---|
| 43 | </bean>
|
|---|
| 44 |
|
|---|
| 45 | <bean id="formAuthenticationEntryPoint"
|
|---|
| 46 | class="org.springframework.security.ui.webapp.AuthenticationProcessingFilterEntryPoint">
|
|---|
| 47 | <property name="loginFormUrl" value="/login.html"/>
|
|---|
| 48 | </bean>
|
|---|
| 49 |
|
|---|
| 50 | <bean id="logoutFilter" class="org.springframework.security.ui.logout.LogoutFilter">
|
|---|
| 51 | <constructor-arg value="/"/>
|
|---|
| 52 | <constructor-arg>
|
|---|
| 53 | <list>
|
|---|
| 54 | <bean class="gov.va.med.edp.springframework.security.ui.vistalink.VistaLogoutHandler">
|
|---|
| 55 | <property name="userDetailsService" ref="vistaUserDetailsDao"/>
|
|---|
| 56 | </bean>
|
|---|
| 57 | <bean class="org.springframework.security.ui.logout.SecurityContextLogoutHandler"/>
|
|---|
| 58 | </list>
|
|---|
| 59 | </constructor-arg>
|
|---|
| 60 | <property name="filterProcessesUrl" value="/logout.html"/>
|
|---|
| 61 | </bean>
|
|---|
| 62 | </beans>
|
|---|
