server/src/main/webapp/WEB-INF/spring-security.xml
branchuser_management
changeset 226 d2b688aadd8c
parent 225 0fcce86e650c
child 229 5064a6ddcb08
equal deleted inserted replaced
225:0fcce86e650c 226:d2b688aadd8c
    25     <bean class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
    25     <bean class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
    26         <property name="order" value="1"/>
    26         <property name="order" value="1"/>
    27         <property name="location" value="#{propsLocations.classpathProps}"/>
    27         <property name="location" value="#{propsLocations.classpathProps}"/>
    28         <property name="ignoreUnresolvablePlaceholders" value="true"/>
    28         <property name="ignoreUnresolvablePlaceholders" value="true"/>
    29         <property name="IgnoreResourceNotFound" value="true"/>
    29         <property name="IgnoreResourceNotFound" value="true"/>
    30     </bean>    
    30     </bean>
       
    31     
       
    32     <bean class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder" id="renkanPasswordEncoder">
       
    33         <constructor-arg name="strength" value="10" type="int"/>
       
    34     </bean>
    31  
    35  
    32     <security:http auto-config="true" use-expressions="true">
    36     <security:http auto-config="true" use-expressions="true">
    33         <security:intercept-url pattern="/admin" access="hasRole('ROLE_ADMIN')" />
    37         <security:intercept-url pattern="/admin" access="hasRole('ROLE_ADMIN')" />
    34         <security:intercept-url pattern="/admin/**" access="hasRole('ROLE_ADMIN')" />
    38         <security:intercept-url pattern="/admin/**" access="hasRole('ROLE_ADMIN')" />
    35         <security:form-login login-page="/auth/login" authentication-failure-url="/auth/loginfailed" password-parameter="password" username-parameter="username" />
    39         <security:form-login login-page="/auth/login" authentication-failure-url="/auth/loginfailed" password-parameter="password" username-parameter="username" />