java - Spring Security URL pattern configuration -
this 1 should quite simple. i've been stuck while. i'm trying implement spring security in web application.
by default, url's should publically accessible. except following:
- /nl/favorieten/
- /fr/favorites/
i've tried several things, ending following:
<http auto-config="true" access-denied-page="/login"> <intercept-url pattern="/*/favori*" access="is_authenticated_fully" /> <intercept-url pattern="/**" access="is_authenticated_anonymously" /> <form-login always-use-default-target="true" login-page="/login" default-target-url="/" authentication-failure-url="/login?login_error=1" /> <logout invalidate-session="false" logout-url="/logout" /> </http> obviously without success. i've tried combination of regex, ordering rules, changing roles. nothing seems redirect request /login.
except ofcourse if /** should is_authenticated_fully
simply put:
<intercept-url pattern="/nl/favorieten/*" access="is_authenticated_fully" /> <intercept-url pattern="/fr/favorites/*" access="is_authenticated_fully" />
Comments
Post a Comment