spring-security.xml

spring-security.xml

<b:beans xmlns="http://www.springframework.org/schema/security"
	xmlns:b="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
						http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd">

	<http auto-config="true">
		<form-login login-page="/faces/signin/login.xhtml"
			login-processing-url="/login" default-target-url="/faces/index.xhtml"
			authentication-failure-url="/faces/signin/login.xhtml?error=true" />

		<logout logout-success-url="/signin/logout.html" />

		<intercept-url pattern="/faces/signin/login.xhtml"
			access="isAnonymous()" />

		<intercept-url pattern="/faces/javax.faces.resource/**"
			access="isAnonymous()" />
			
		<intercept-url pattern="/login**" access="isAnonymous()" />

		<intercept-url pattern="/faces/**"
			access="isAuthenticated()" />

	</http>

	<authentication-manager>
		<authentication-provider
			user-service-ref="userDetailService">
			<password-encoder ref="passwordEncoder" />
		</authentication-provider>
	</authentication-manager>

	<b:bean id="userDetailService"
		class="org.springframework.ejb.access.LocalStatelessSessionProxyFactoryBean">
		<b:property name="jndiName"
			value="java:global/ErisEAR/ErisWeb/UserDetailServiceImpl!io.gdiazs.eris.security.services.UserDetailServiceImpl" />
		<b:property name="businessInterface"
			value="org.springframework.security.core.userdetails.UserDetailsService" />
	</b:bean>

	<b:bean id="passwordEncoder"
		class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder">
		<b:constructor-arg value="11" />
	</b:bean>

</b:beans>