Acegi Security is an open source project that provide comprehensive authentication +
Acegi Security is an open source project that provides comprehensive authentication
and authorisation services for enterprise applications based on
The Spring Framework.
Acegi Security can authenticate using a variety of pluggable providers, and
@@ -69,7 +69,7 @@
expressed in the servlet specification's own limited URI path format.
Acegi Security provides a far more comprehensive approach. For instance,
you can use Ant paths or regular expressions, you can consider parts of the
- URI other than simply the requested page (eg you can consider request
+ URI other than simply the requested page (eg you can consider HTTP GET
parameters), and you can implement your own runtime source of configuration
data. This means your web request security can be dynamically changed during
the actual execution of your webapp.
@@ -144,12 +144,12 @@
has a specific section on filter ordering.
The next most common source of problems step from custom +
The next most common source of problems stem from custom
AuthenticationDao implementations that simply don't properly
- implement the interface. For example, they return null instead
+ implement the interface contract. For example, they return null instead
of the user not found exception, or fail to add in the
GrantedAuthority[]s. Whilst DaoAuthenticationProvider
- does its best to check the AuthenticationDaoreturns a valid
+ does its best to check the AuthenticationDao returns a valid
UserDetails, we suggest you write the
UserDetails object to the log and check it looks correct.