Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-07-08 11:32:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added SSL support to the tutorial app Jetty plugin configuration and added a requirement for SSL on the "extremely secure" page.

Browse Source
This commit is contained in:
Luke Taylor 2008-01-24 16:30:06 +00:00
parent d10450cfb7
commit b85f76e6c1
4 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
samples/tutorial/keystore Normal file
View File

Binary file not shown.

12
samples/tutorial/pom.xml
View File

@ -96,6 +96,18 @@
<version>6.1.5</version> <version>6.1.5</version>
<configuration> <configuration>
<contextPath>/tutorial</contextPath> <contextPath>/tutorial</contextPath>
<connectors>
<connector implementation="org.mortbay.jetty.nio.SelectChannelConnector">
<port>8080</port>
<confidentialPort>8443</confidentialPort>
</connector>
<connector implementation="org.mortbay.jetty.security.SslSocketConnector">
<port>8443</port>
<keystore>keystore</keystore>
<password>password</password>
<keyPassword>password</keyPassword>
</connector>
</connectors>
</configuration> </configuration>
</plugin> </plugin>
</plugins> </plugins>

6
samples/tutorial/readme.txt Normal file
View File

@ -0,0 +1,6 @@
Run the application directly from the checked out source tree, using the command
mvn jetty:run
This will start jetty on port 8080, with SSL support on port 8443.

2
samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security-ns.xml
View File

@ -15,7 +15,7 @@
<annotation-driven/> <annotation-driven/>
<http> <http>
<intercept-url pattern="/secure/extreme/**" access="ROLE_SUPERVISOR"/> <intercept-url pattern="/secure/extreme/**" access="ROLE_SUPERVISOR" requires-channel="https"/>
<intercept-url pattern="/secure/**" access="IS_AUTHENTICATED_REMEMBERED" /> <intercept-url pattern="/secure/**" access="IS_AUTHENTICATED_REMEMBERED" />
<!-- Disable web URI authorization, as we're using <annotation-driven> and have @Secured the services layer instead <!-- Disable web URI authorization, as we're using <annotation-driven> and have @Secured the services layer instead
<intercept-url pattern="/listAccounts.html" access="IS_AUTHENTICATED_REMEMBERED" /> <intercept-url pattern="/listAccounts.html" access="IS_AUTHENTICATED_REMEMBERED" />