X-Git-Url: http://git.argeo.org/?a=blobdiff_plain;ds=sidebyside;f=server%2Fmodules%2Forg.argeo.jackrabbit.webapp%2FWEB-INF%2Fsecurity-filters.xml;h=bfdafd34149345d8472b1c97e91e293e38cbf153;hb=ced6639536af26ce611ab3ac464821376a627af4;hp=f12f0c8048e5f62630a7d0d2cbfa144592450372;hpb=0c7d4e488bf4e357ca33329c87a29baae63a5be9;p=lgpl%2Fargeo-commons.git

diff --git a/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security-filters.xml b/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security-filters.xml
index f12f0c804..bfdafd341 100644
--- a/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security-filters.xml
+++ b/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security-filters.xml
@@ -9,15 +9,15 @@
 	<bean id="springSecurityFilterChain" class="org.springframework.security.util.FilterChainProxy">
 		<sec:filter-chain-map path-type="ant">
 			<sec:filter-chain pattern="/webdav/**"
-				filters="session,basic,rememberMe,anonymous,exception,interceptor" />
+				filters="session,x509,basic,rememberMe,exception,interceptor" />
 			<sec:filter-chain pattern="/remoting/**"
-				filters="session,basic,rememberMe,anonymous,exception,interceptor" />
+				filters="x509,basic,anonymous,exception,interceptor" />
 			<sec:filter-chain pattern="/public/**"
-				filters="session,anonymous,exception,interceptorPublic" />
+				filters="anonymous,exception,interceptorPublic" />
 			<sec:filter-chain pattern="/pub/**"
-				filters="session,anonymous,exception,interceptorPublic" />
+				filters="anonymous,exception,interceptorPublic" />
 			<sec:filter-chain pattern="/j_spring_security_logout"
-				filters="session,logout,exception" />
+				filters="logout,exception" />
 		</sec:filter-chain-map>
 	</bean>
 
@@ -28,7 +28,6 @@
 			<value>
 				PATTERN_TYPE_APACHE_ANT
 				/*/*/*/**=ROLE_USER,ROLE_ADMIN
-				/**=ROLE_ANONYMOUS
 			</value>
 		</property>
 	</bean>
@@ -41,12 +40,23 @@
 		</property>
 	</bean>
 
-	<!-- Integrates the authentication information in the http sessions -->
+	<bean id="x509"
+		class="org.springframework.security.ui.preauth.x509.X509PreAuthenticatedProcessingFilter">
+		<property name="authenticationManager" ref="authenticationManager" />
+		<property name="principalExtractor">
+			<bean
+				class="org.springframework.security.ui.preauth.x509.SubjectDnX509PrincipalExtractor">
+				<property name="subjectDnRegex" value="CN=(.*?)," />
+			</bean>
+		</property>
+	</bean>
+
+	<!-- Integrates the authentication information in the http sessions
 	<bean id="session"
 		class="org.springframework.security.context.HttpSessionContextIntegrationFilter">
 		<property name="allowSessionCreation" value="false" />
 	</bean>
-
+ -->
 	<!-- Processes logouts, removing both session informations and the remember-me 
 		cookie from the browser -->
 	<bean id="logout" class="org.springframework.security.ui.logout.LogoutFilter">