Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SEC-1536: added JAAS API Integration, updated doc, updated jaas sample

Browse Source
This commit is contained in:
rwinch
2010-09-13 13:12:45 -05:00
parent 0217e98bdb
commit de819378fc
19 changed files with 476 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
samples/jaas/jaas.gradle
View File

@@ -13,7 +13,6 @@ dependencies {
runtime project(':spring-security-web'),
project(':spring-security-config'),
project(':spring-security-taglibs'),
"org.springframework:spring-context-support:$springVersion",
"javax.servlet:jstl:$jstlVersion",
"org.slf4j:jcl-over-slf4j:$slf4jVersion",

5
samples/jaas/src/main/java/samples/jaas/UsernameEqualsPasswordLoginModule.java
View File

@@ -67,7 +67,7 @@ public class UsernameEqualsPasswordLoginModule implements LoginModule {
}
public boolean login() throws LoginException {
if (username != null && !username.equals(password)) {
if (username == null || !username.equals(password)) {
throw new LoginException("username is not equal to password");
}
@@ -75,6 +75,9 @@ public class UsernameEqualsPasswordLoginModule implements LoginModule {
public String getName() {
return username;
}
public String toString() {
return "Principal [name="+getName()+"]";
}
});
return true;
}

2
samples/jaas/src/main/resources/applicationContext-security.xml
View File

@@ -9,7 +9,7 @@
http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-3.0.xsd">
<sec:http auto-config="true" use-expressions="true">
<sec:http auto-config="true" use-expressions="true" jaas-api-provision="true">
<sec:intercept-url pattern="/secure/**" access="isAuthenticated()"/>
</sec:http>

5
samples/jaas/src/main/webapp/index.jsp
View File

@@ -1,3 +1,5 @@
<%@ page import="javax.security.auth.Subject" %>
<%@ page import="java.security.AccessController" %>
<%@ taglib prefix="sec" uri="http://www.springframework.org/security/tags" %>
<html>
<body>
@@ -9,6 +11,9 @@ Anyone can view this page.
Your principal object is....: <%= request.getUserPrincipal() %>
</p>
<p>
Subject.getSubject(AccessController.getContext()) is....: <%= Subject.getSubject(AccessController.getContext()) %>
</p>
<p>
<sec:authorize url='/secure/index.jsp'>You can currently access "/secure" URLs.</sec:authorize>
</p>

11
samples/jaas/src/main/webapp/secure/index.jsp
View File

@@ -1,3 +1,5 @@
<%@ page import="javax.security.auth.Subject" %>
<%@ page import="java.security.AccessController" %>
<%@ page import="org.springframework.security.core.context.SecurityContextHolder" %>
<%@ page import="org.springframework.security.core.Authentication" %>
<%@ page import="org.springframework.security.core.GrantedAuthority" %>
@@ -10,6 +12,15 @@
<h3>Security Debug Information</h3>
<%
Subject subject = Subject.getSubject(AccessController.getContext());
if(subject != null) { %>
<p>
Subject.getSubject(AccessController.getContext()) is....: <%= subject %>
</p>
<%} %>
<%
Authentication auth = SecurityContextHolder.getContext().getAuthentication();
if (auth != null) { %>