X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=security%2Fmodules%2Forg.argeo.security.dao.os%2FMETA-INF%2Fspring%2Fsecurity-os.xml;fp=security%2Fmodules%2Forg.argeo.security.dao.os%2FMETA-INF%2Fspring%2Fsecurity-os.xml;h=b337218835643a34aa75d12abc1af4d0bdcfe9da;hb=484dcb1507e4e35cc282e50522ea7eac7e99a7f9;hp=180f1fe8d042af2a7e3665b94dd9043838bebf17;hpb=366325583b0b101f3e78fcfda65d3f856cef8617;p=lgpl%2Fargeo-commons.git

diff --git a/security/modules/org.argeo.security.dao.os/META-INF/spring/security-os.xml b/security/modules/org.argeo.security.dao.os/META-INF/spring/security-os.xml
index 180f1fe8d..b33721883 100644
--- a/security/modules/org.argeo.security.dao.os/META-INF/spring/security-os.xml
+++ b/security/modules/org.argeo.security.dao.os/META-INF/spring/security-os.xml
@@ -11,31 +11,59 @@
 		</property>
 	</bean>
 
-	<bean id="osJcrAuthenticationProvider" class="org.argeo.security.jcr.OsJcrAuthenticationProvider">
+	<bean id="argeoDataModel" class="org.argeo.jackrabbit.JackrabbitContainer"
+		init-method="init" destroy-method="destroy">
+		<description><![CDATA[Make sure that Argeo base data model is registered]]></description>
+		<property name="cndFiles">
+			<list>
+				<value>/org/argeo/jcr/argeo.cnd</value>
+			</list>
+		</property>
+		<property name="repository" ref="nodeRepository" />
 	</bean>
 
-
 	<bean id="systemExecutionService" class="org.argeo.security.core.KeyBasedSystemExecutionService">
-		<property name="systemAuthenticationKey" value="${argeo.security.systemKey}" />
 		<property name="authenticationManager" ref="authenticationManager" />
+		<property name="systemAuthenticationKey" value="${argeo.security.systemKey}" />
 	</bean>
 
 	<bean id="authenticationManager" class="org.springframework.security.providers.ProviderManager">
 		<property name="providers">
-			<bean factory-bean="authenticationProvidersRegister"
-				factory-method="getProviders" />
+			<list>
+				<ref bean="authByAdapterProvider" />
+				<ref bean="osJcrAuthenticationProvider" />
+			</list>
 		</property>
 	</bean>
 
-	<bean id="authenticationProvidersRegister" class="org.argeo.security.core.AuthenticationProvidersRegister">
-		<property name="defaultProviders">
+	<!-- Authentication providers -->
+	<bean id="osJcrAuthenticationProvider" class="org.argeo.security.jcr.OsJcrAuthenticationProvider"
+		init-method="init" destroy-method="destroy">
+		<property name="repository" ref="argeoDataModel" />
+	</bean>
+
+	<bean id="authByAdapterProvider"
+		class="org.springframework.security.adapters.AuthByAdapterProvider">
+		<description><![CDATA[System authentication]]></description>
+		<property name="key" value="${argeo.security.systemKey}" />
+	</bean>
+
+	<!-- Internal authentication, used by the general authentication process 
+		himself, in order to prevent the following dependency cycle: Repository.login() 
+		<= AuthenticationManager <= osJcrAuthenticationProvider <= Repository.login() 
+		in init() -->
+	<bean id="internalAuthenticationManager" class="org.springframework.security.providers.ProviderManager">
+		<property name="providers">
 			<list>
-				<bean class="org.springframework.security.adapters.AuthByAdapterProvider">
-					<property name="key" value="${argeo.security.systemKey}" />
-				</bean>
-				<ref bean="osJcrAuthenticationProvider" />
+				<ref bean="authByAdapterProvider" />
 			</list>
 		</property>
 	</bean>
 
+	<bean
+		class="org.argeo.security.core.AuthenticatedApplicationContextInitialization">
+		<description><![CDATA[Executes initialization with a system authentication]]></description>
+		<property name="authenticationManager" ref="internalAuthenticationManager" />
+	</bean>
+
 </beans>
\ No newline at end of file