security-context.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xmlns:security="http://www.springframework.org/schema/security"

xsi:schemaLocation="http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd

http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">

<bean id="customAccessDenied" 

class="org.zerock.security.CustomAccessDeniedHandler">

</bean>

<!-- <bean id="customLoginSuccess" 

class="org.zerock.security.CustomLoginSuccessHandler">

</bean> -->

<!-- <bean id="customPasswordEncoder"

class="org.zerock.security.CustomNoOpPasswordEncoder"></bean>

-->

<bean id="bcryptPasswordEncoder" 

class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder"/>

<bean id="customUserDetailService"

class="org.zerock.security.CustomUserDetailService"/>

 

 

 

<security:http>

<security:intercept-url pattern="/sample/all"

access="permitAll" />

<security:intercept-url

pattern="/sample/member" access="hasRole('ROLE_MEMBER')" />

<security:intercept-url

pattern="/sample/admin" access="hasRole('ROLE_ADMIN')" />

<!-- <security:form-login login-page="/customLogin" authentication-success-handler-ref="customLoginSuccess"/> -->

<security:form-login login-page="/customLogin"/>

<!-- <security:access-denied-handler error-page="/accessError" /> -->

<security:access-denied-handler ref="customAccessDenied"/>

<security:logout logout-url="/customLogout" invalidate-session="true" delete-cookies="remember-me,JSESSION_ID"/>

<security:remember-me data-source-ref="dataSource" token-validity-seconds="604800"/>

</security:http>

<security:authentication-manager>

<security:authentication-provider user-service-ref="customUserDetailService">

<!-- <security:user-service>

<security:user name="hkd" password="{noop}1234"

authorities="ROLE_MEMBER" />

<security:user name="admin" password="{noop}admin"

authorities="ROLE_MEMBER, ROLE_ADMIN" />

</security:user-service> -->

<!-- <security:jdbc-user-service data-source-ref="dataSource"

users-by-username-query="select userid,userpw,enabled from tbl_member where userid=?" 

authorities-by-username-query="select userid,auth from tbl_member_auth where userid=?"

/> -->

 

<!-- <security:password-encoder ref="customPasswordEncoder"/> -->

<security:password-encoder ref="bcryptPasswordEncoder"/>

</security:authentication-provider>

</security:authentication-manager>

</beans>