SEC-2783: XML Configuration Defaults Should Match JavaConfig
* j_username -> username * j_password -> password * j_spring_security_check -> login * j_spring_cas_security_check -> login/cas * j_spring_cas_security_proxyreceptor -> login/cas/proxyreceptor * j_spring_openid_security_login -> login/openid * j_spring_security_switch_user -> login/impersonate * j_spring_security_exit_user -> logout/impersonate * login_error -> error * use-expressions=true by default
This commit is contained in:
@@ -77,7 +77,7 @@ public class OpenIDAuthenticationFilter extends AbstractAuthenticationProcessing
|
||||
//~ Constructors ===================================================================================================
|
||||
|
||||
public OpenIDAuthenticationFilter() {
|
||||
super("/j_spring_openid_security_check");
|
||||
super("/login/openid");
|
||||
}
|
||||
|
||||
//~ Methods ========================================================================================================
|
||||
@@ -232,11 +232,11 @@ public class OpenIDAuthenticationFilter extends AbstractAuthenticationProcessing
|
||||
/**
|
||||
* Maps the <tt>return_to url</tt> to a realm, for example:
|
||||
* <pre>
|
||||
* http://www.example.com/j_spring_openid_security_check -> http://www.example.com/realm</tt>
|
||||
* http://www.example.com/login/openid -> http://www.example.com/realm</tt>
|
||||
* </pre>
|
||||
* If no mapping is provided then the returnToUrl will be parsed to extract the protocol, hostname and port followed
|
||||
* by a trailing slash.
|
||||
* This means that <tt>http://www.example.com/j_spring_openid_security_check</tt> will automatically become
|
||||
* This means that <tt>http://www.example.com/login/openid</tt> will automatically become
|
||||
* <tt>http://www.example.com:80/</tt>
|
||||
*
|
||||
* @param realmMapping containing returnToUrl -> realm mappings
|
||||
|
||||
@@ -24,7 +24,7 @@ public class OpenIDAuthenticationFilterTests {
|
||||
OpenIDAuthenticationFilter filter;
|
||||
private static final String REDIRECT_URL = "http://www.example.com/redirect";
|
||||
private static final String CLAIMED_IDENTITY_URL = "http://www.example.com/identity";
|
||||
private static final String REQUEST_PATH = "/j_spring_openid_security_check";
|
||||
private static final String REQUEST_PATH = "/login/openid";
|
||||
private static final String FILTER_PROCESS_URL = "http://localhost:8080" + REQUEST_PATH;
|
||||
private static final String DEFAULT_TARGET_URL = FILTER_PROCESS_URL;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user