Use anonymous user

[lgpl/argeo-commons.git] / security / modules / org.argeo.security.webapp / WEB-INF / security.xml

diff --git a/security/modules/org.argeo.security.webapp/WEB-INF/security.xml b/security/modules/org.argeo.security.webapp/WEB-INF/security.xml
index 3ae36186f57c26e4f64d63fd00ce5b08804cc2ae..b423327ff500eb92e69301cc61efba8ea3718cad 100644 (file)
--- a/security/modules/org.argeo.security.webapp/WEB-INF/security.xml
+++ b/security/modules/org.argeo.security.webapp/WEB-INF/security.xml
@@ -8,22 +8,27 @@
 
        <bean id="authenticationProcessingFilterEntryPoint"
                class="org.springframework.security.ui.webapp.AuthenticationProcessingFilterEntryPoint">
-               <property name="loginFormUrl" value="/getCredentials.security" />
+               <property name="loginFormUrl" value="/getCredentials.ria" />
                <property name="forceHttps" value="false" />
        </bean>
 
        <security:http entry-point-ref="authenticationProcessingFilterEntryPoint">
-               <security:intercept-url pattern="/**"
+               <security:intercept-url pattern="/*.security"
                        access="ROLE_USER,ROLE_ADMIN" />
-               <security:logout logout-url="/logout.ria" />
+               <security:intercept-url pattern="/*.ria"
+                       access="ROLE_ANONYMOUS,ROLE_USER" />
+               <security:logout logout-url="/logout.ria"
+                       logout-success-url="/getCredentials.ria" />
+               <security:anonymous username="anonymous"
+                       granted-authority="ROLE_ANONYMOUS" />
        </security:http>
 
        <bean id="authenticationProcessingFilter"
                class="org.springframework.security.ui.webapp.AuthenticationProcessingFilter">
                <security:custom-filter position="AUTHENTICATION_PROCESSING_FILTER" />
                <property name="authenticationManager" ref="_authenticationManager" />
-               <property name="authenticationFailureUrl" value="/getCredentials.security" />
-               <property name="defaultTargetUrl" value="/getCredentials.security" />
+               <property name="authenticationFailureUrl" value="/getCredentials.ria" />
+               <property name="defaultTargetUrl" value="/getCredentials.ria" />
                <property name="filterProcessesUrl" value="/login.ria" />
                <property name="usernameParameter" value="username" />
                <property name="passwordParameter" value="password" />