commerce.integration.2.0.7-GA.source-code.bl-applicationContext-test-security.xml Maven / Gradle / Ivy

Go to download
<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:sec="http://www.springframework.org/schema/security"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
                        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">


    <sec:http auto-config="true" >
        <sec:intercept-url pattern="/account/**" access="ROLE_USER" />      
        <sec:form-login login-page='/registerCustomer/registerCustomer.htm' 
                        default-target-url='/welcome.htm'
                        authentication-failure-url="/registerCustomer/registerCustomer.htm?error=true"
                        login-processing-url="/login_post.htm"
                         />
        <sec:logout logout-url="/logout.htm"/>
        <sec:remember-me />
        <sec:custom-filter after="REMEMBER_ME_FILTER" ref="blCustomerStateFilter"/>
    </sec:http>
    
    <!--  bean id="passwordEncoder" class="org.springframework.security.providers.encoding.Md5PasswordEncoder"/ -->    

    <!--=============================================================================================== -->
    <!--  Override the authentication provider to use the JDBC authentication defined below.                                                -->
    <!--=============================================================================================== -->
    <sec:authentication-manager alias="blAuthenticationManager">
        <sec:authentication-provider user-service-ref="blUserDetailsService" >
            <sec:password-encoder ref="blPasswordEncoder"/>
        </sec:authentication-provider>
    </sec:authentication-manager>

    <sec:jdbc-user-service 
            data-source-ref="blDS"
            id="blUserDetailsService" 
            users-by-username-query="select user_name,password,true from blc_customer where user_name=?"
            authorities-by-username-query="select c.user_name,r.role_name from blc_customer c join blc_customer_role cr on c.customer_id = cr.customer_id join blc_role r on cr.role_id = r.role_id where user_name=?"
     /> 
                               
    <bean id="blCustomerStateFilter" class="org.broadleafcommerce.profile.web.core.security.CustomerStateFilter"/>
                                                                          
</beans>