InfoQ - Building REST with Spring - security configigration xml

securityConfig.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:beans="http://www.springframework.org/schema/beans"
   xmlns:sec="http://www.springframework.org/schema/security"
   xsi:schemaLocation="
   http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd
   http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd">

   <http create-session="stateless" entry-point-ref="digestEntryPoint">
      <intercept-url pattern="/api/admin/**" access="ROLE_ADMIN" />

      <http-basic />
      <custom-filter ref="digestFilter" after="BASIC_AUTH_FILTER" />
   </http>

   <beans:bean id="digestFilter"
      class="org.springframework.security.web.authentication.www.DigestAuthenticationFilter">
      <beans:property name="userDetailsService" ref="securityUserService" />
      <beans:property name="authenticationEntryPoint" ref="digestEntryPoint" />
   </beans:bean>

   <beans:bean id="digestEntryPoint"
      class="org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint">
      <beans:property name="realmName"
         value="Contacts Realm via Digest Authentication" />
      <beans:property name="key" value="acegi" />
   </beans:bean>

   <authentication-manager>
      <authentication-provider>
         <user-service id="securityUserService">
            <user name="eparaschiv" password="eparaschiv" authorities="ROLE_ADMIN" />
            <user name="user" password="user" authorities="ROLE_USER" />
         </user-service>
      </authentication-provider>
   </authentication-manager>

</beans:beans>