jeudi 26 mars 2015

Spring security: basic authentication before form login



I would like to add (temporary) basic authentication before website is shown. I try to add this http before normal form login.



<http pattern="/**" use-expressions="true" authentication-manager-ref="basicAuthManager">
<intercept-url pattern="/**" access="hasRole('ROLE_USER')" />
<http-basic />
</http>

<http auto-config="true" use-expressions="true">
...
<form-login .../>
</http>


But I have exception:



A universal match pattern ('/**') is defined before other patterns in the filter chain,
causing them to be ignored. Please check the ordering in your <security:http>
namespace or FilterChainProxy bean configuration


Is it possible to do what I want?




Aucun commentaire:

Enregistrer un commentaire