[maven-release-plugin] rollback the release of argeo-commons-2.1.1.tp

[lgpl/argeo-commons.git] / server / modules / org.argeo.server.rap.webapp / WEB-INF / security-filters.xml

diff --git a/server/modules/org.argeo.server.rap.webapp/WEB-INF/security-filters.xml b/server/modules/org.argeo.server.rap.webapp/WEB-INF/security-filters.xml
index 3a6650cd9e331b1c9d5bb0cfa8d17683fe4003b4..4c7df6b06f773590e916284c3d4e061dbd4f0cac 100644 (file)
--- a/server/modules/org.argeo.server.rap.webapp/WEB-INF/security-filters.xml
+++ b/server/modules/org.argeo.server.rap.webapp/WEB-INF/security-filters.xml
@@ -8,11 +8,13 @@
 
        <bean id="springSecurityFilterChain" class="org.springframework.security.util.FilterChainProxy">
                <sec:filter-chain-map path-type="ant">
-                       <sec:filter-chain pattern="/ui"
-                               filters="session,basic,rememberMe,exception,interceptor" />
+                       <sec:filter-chain pattern="/private"
+                               filters="session,x509,basic,rememberMe,exception,interceptor" />
                        <sec:filter-chain pattern="/basicauth"
-                               filters="session,basic,exception,interceptor" />
-                       <sec:filter-chain pattern="/node" filters="session" />
+                               filters="session,x509,basic,exception,interceptor" />
+                       <sec:filter-chain pattern="/clientauth"
+                               filters="session,x509,exception,interceptor" />
+                       <!-- <sec:filter-chain pattern="/node" filters="session,x509,exception,interceptor" /> -->
                        <sec:filter-chain pattern="/public"
                                filters="session,anonymous,exception,interceptorPublic" />
                        <sec:filter-chain pattern="/j_spring_security_logout"
@@ -39,6 +41,17 @@
                </property>
        </bean>
 
+       <bean id="x509"
+               class="org.springframework.security.ui.preauth.x509.X509PreAuthenticatedProcessingFilter">
+               <property name="authenticationManager" ref="authenticationManager" />
+               <property name="principalExtractor">
+                       <bean
+                               class="org.springframework.security.ui.preauth.x509.SubjectDnX509PrincipalExtractor">
+                               <property name="subjectDnRegex" value="CN=(.*?)," />
+                       </bean>
+               </property>
+       </bean>
+
        <!-- Integrates the authentication information in the http sessions -->
        <bean id="session"
                class="org.springframework.security.context.HttpSessionContextIntegrationFilter">
@@ -88,7 +101,7 @@
        <bean id="basicProcessingFilterEntryPoint"
                class="org.springframework.security.ui.basicauth.BasicProcessingFilterEntryPoint">
                <property name="realmName">
-                       <value>Argeo</value>
+                       <value>${argeo.server.realmName}</value>
                </property>
        </bean>