X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=server%2Fmodules%2Forg.argeo.server.rap.webapp%2FWEB-INF%2Fsecurity-filters.xml;h=45e5457d9d6cca2d052a5b6c5c886533812d96e1;hb=c61ab583504a3fc57b24cab338f9029ad3b6d295;hp=3a6650cd9e331b1c9d5bb0cfa8d17683fe4003b4;hpb=0c7d4e488bf4e357ca33329c87a29baae63a5be9;p=lgpl%2Fargeo-commons.git

diff --git a/server/modules/org.argeo.server.rap.webapp/WEB-INF/security-filters.xml b/server/modules/org.argeo.server.rap.webapp/WEB-INF/security-filters.xml
index 3a6650cd9..45e5457d9 100644
--- a/server/modules/org.argeo.server.rap.webapp/WEB-INF/security-filters.xml
+++ b/server/modules/org.argeo.server.rap.webapp/WEB-INF/security-filters.xml
@@ -9,10 +9,12 @@
 	<bean id="springSecurityFilterChain" class="org.springframework.security.util.FilterChainProxy">
 		<sec:filter-chain-map path-type="ant">
 			<sec:filter-chain pattern="/ui"
-				filters="session,basic,rememberMe,exception,interceptor" />
+				filters="session,x509,basic,rememberMe,exception,interceptor" />
 			<sec:filter-chain pattern="/basicauth"
-				filters="session,basic,exception,interceptor" />
-			<sec:filter-chain pattern="/node" filters="session" />
+				filters="session,x509,basic,exception,interceptor" />
+			<sec:filter-chain pattern="/clientauth"
+				filters="session,x509,exception,interceptor" />
+			<!-- <sec:filter-chain pattern="/node" filters="session,x509,exception,interceptor" /> -->
 			<sec:filter-chain pattern="/public"
 				filters="session,anonymous,exception,interceptorPublic" />
 			<sec:filter-chain pattern="/j_spring_security_logout"
@@ -39,6 +41,17 @@
 		</property>
 	</bean>
 
+	<bean id="x509"
+		class="org.springframework.security.ui.preauth.x509.X509PreAuthenticatedProcessingFilter">
+		<property name="authenticationManager" ref="authenticationManager" />
+		<property name="principalExtractor">
+			<bean
+				class="org.springframework.security.ui.preauth.x509.SubjectDnX509PrincipalExtractor">
+				<property name="subjectDnRegex" value="CN=(.*?)," />
+			</bean>
+		</property>
+	</bean>
+
 	<!-- Integrates the authentication information in the http sessions -->
 	<bean id="session"
 		class="org.springframework.security.context.HttpSessionContextIntegrationFilter">
@@ -88,7 +101,7 @@
 	<bean id="basicProcessingFilterEntryPoint"
 		class="org.springframework.security.ui.basicauth.BasicProcessingFilterEntryPoint">
 		<property name="realmName">
-			<value>Argeo</value>
+			<value>${argeo.server.realmName}</value>
 		</property>
 	</bean>