X-Git-Url: http://git.argeo.org/?a=blobdiff_plain;ds=sidebyside;f=security%2Fmodules%2Forg.argeo.security.webapp%2FWEB-INF%2Fsecurity.xml;h=b423327ff500eb92e69301cc61efba8ea3718cad;hb=51cdd7c0883f0ccd756f0f5d0dc2ac97b327d25d;hp=3ae36186f57c26e4f64d63fd00ce5b08804cc2ae;hpb=dd57224ab51cc377dd7dfb34487f95f16895baaf;p=lgpl%2Fargeo-commons.git

diff --git a/security/modules/org.argeo.security.webapp/WEB-INF/security.xml b/security/modules/org.argeo.security.webapp/WEB-INF/security.xml
index 3ae36186f..b423327ff 100644
--- a/security/modules/org.argeo.security.webapp/WEB-INF/security.xml
+++ b/security/modules/org.argeo.security.webapp/WEB-INF/security.xml
@@ -8,22 +8,27 @@
 
 	<bean id="authenticationProcessingFilterEntryPoint"
 		class="org.springframework.security.ui.webapp.AuthenticationProcessingFilterEntryPoint">
-		<property name="loginFormUrl" value="/getCredentials.security" />
+		<property name="loginFormUrl" value="/getCredentials.ria" />
 		<property name="forceHttps" value="false" />
 	</bean>
 
 	<security:http entry-point-ref="authenticationProcessingFilterEntryPoint">
-		<security:intercept-url pattern="/**"
+		<security:intercept-url pattern="/*.security"
 			access="ROLE_USER,ROLE_ADMIN" />
-		<security:logout logout-url="/logout.ria" />
+		<security:intercept-url pattern="/*.ria"
+			access="ROLE_ANONYMOUS,ROLE_USER" />
+		<security:logout logout-url="/logout.ria"
+			logout-success-url="/getCredentials.ria" />
+		<security:anonymous username="anonymous"
+			granted-authority="ROLE_ANONYMOUS" />
 	</security:http>
 
 	<bean id="authenticationProcessingFilter"
 		class="org.springframework.security.ui.webapp.AuthenticationProcessingFilter">
 		<security:custom-filter position="AUTHENTICATION_PROCESSING_FILTER" />
 		<property name="authenticationManager" ref="_authenticationManager" />
-		<property name="authenticationFailureUrl" value="/getCredentials.security" />
-		<property name="defaultTargetUrl" value="/getCredentials.security" />
+		<property name="authenticationFailureUrl" value="/getCredentials.ria" />
+		<property name="defaultTargetUrl" value="/getCredentials.ria" />
 		<property name="filterProcessesUrl" value="/login.ria" />
 		<property name="usernameParameter" value="username" />
 		<property name="passwordParameter" value="password" />