Minor doc link updates and tidying.
This commit is contained in:
parent
ad82e6a575
commit
4da4734750
|
@ -177,14 +177,14 @@ boolean supports(Class clazz);
|
||||||
<title>Custom Voters</title>
|
<title>Custom Voters</title>
|
||||||
<para>Obviously, you can also implement a custom
|
<para>Obviously, you can also implement a custom
|
||||||
<interfacename>AccessDecisionVoter</interfacename> and you can
|
<interfacename>AccessDecisionVoter</interfacename> and you can
|
||||||
put just about any access-control logic you want in it. It might
|
put just about any access-control logic you want in it. It might
|
||||||
be specific to your application (business-logic related) or it
|
be specific to your application (business-logic related) or it
|
||||||
might implement some security administration logic. For example, you'll find
|
might implement some security administration logic. For example, you'll find
|
||||||
a <link xlink:href='http://blog.springsource.com/2009/01/02/spring-security-customization-part-2-adjusting-secured-session-in-real-time/'>
|
a <link xlink:href='http://blog.springsource.com/2009/01/02/spring-security-customization-part-2-adjusting-secured-session-in-real-time/'>
|
||||||
blog article</link> on the SpringSource web site which describes how to
|
blog article</link> on the SpringSource web site which describes how to
|
||||||
use a voter to deny access in real-time to users whose accounts have
|
use a voter to deny access in real-time to users whose accounts have
|
||||||
been suspended.
|
been suspended.
|
||||||
</para>
|
</para>
|
||||||
</section>
|
</section>
|
||||||
</section>
|
</section>
|
||||||
</section>
|
</section>
|
||||||
|
|
|
@ -291,7 +291,7 @@
|
||||||
]]>
|
]]>
|
||||||
</programlisting> </para>
|
</programlisting> </para>
|
||||||
<para> The <classname>CasAuthenticationEntryPoint</classname> should be selected to drive
|
<para> The <classname>CasAuthenticationEntryPoint</classname> should be selected to drive
|
||||||
authentication using <link xlink:href="ns-entry-point-ref"
|
authentication using <link xlink:href="#ns-entry-point-ref"
|
||||||
><literal>entry-point-ref</literal></link>. </para>
|
><literal>entry-point-ref</literal></link>. </para>
|
||||||
<para>The <classname>CasAuthenticationFilter</classname> has very similar properties to the
|
<para>The <classname>CasAuthenticationFilter</classname> has very similar properties to the
|
||||||
<classname>UsernamePasswordAuthenticationFilter</classname> (used for form-based
|
<classname>UsernamePasswordAuthenticationFilter</classname> (used for form-based
|
||||||
|
|
|
@ -117,7 +117,7 @@
|
||||||
<interfacename>SaltSource</interfacename> enables the passwords to be populated with
|
<interfacename>SaltSource</interfacename> enables the passwords to be populated with
|
||||||
a "salt", which enhances the security of the passwords in the authentication
|
a "salt", which enhances the security of the passwords in the authentication
|
||||||
repository. These will be discussed in more detail <link
|
repository. These will be discussed in more detail <link
|
||||||
xlink:href="core-services-password-encodin">below</link>. </para>
|
xlink:href="#core-services-password-encoding">below</link>. </para>
|
||||||
</section>
|
</section>
|
||||||
</section>
|
</section>
|
||||||
<section>
|
<section>
|
||||||
|
|
|
@ -599,7 +599,7 @@ List<OpenIDAttribute> attributes = token.getAttributes();</programlisting>The
|
||||||
retrieved value (or values in the case of multi-valued attributes). We'll see
|
retrieved value (or values in the case of multi-valued attributes). We'll see
|
||||||
more about how the <classname>SecurityContextHolder</classname> class is used
|
more about how the <classname>SecurityContextHolder</classname> class is used
|
||||||
when we look at core Spring Security components in the <link
|
when we look at core Spring Security components in the <link
|
||||||
xlink:href="core-components">technical overview</link> chapter. Multiple
|
xlink:href="#core-components">technical overview</link> chapter. Multiple
|
||||||
attribute exchange configurations are also be supported, if you wish to use
|
attribute exchange configurations are also be supported, if you wish to use
|
||||||
multiple identity providers. You can supply multiple
|
multiple identity providers. You can supply multiple
|
||||||
<literal>attribute-exchange</literal> elements, using an
|
<literal>attribute-exchange</literal> elements, using an
|
||||||
|
@ -786,7 +786,7 @@ List<OpenIDAttribute> attributes = token.getAttributes();</programlisting>The
|
||||||
<para>From version 2.0 onwards Spring Security has improved support substantially for adding
|
<para>From version 2.0 onwards Spring Security has improved support substantially for adding
|
||||||
security to your service layer methods. It provides support for JSR-250 annotation
|
security to your service layer methods. It provides support for JSR-250 annotation
|
||||||
security as well as the framework's original <literal>@Secured</literal> annotation.
|
security as well as the framework's original <literal>@Secured</literal> annotation.
|
||||||
From 3.0 you can also make use of new <link xlink:href="el-access">expression-based
|
From 3.0 you can also make use of new <link xlink:href="#el-access">expression-based
|
||||||
annotations</link>. You can apply security to a single bean, using the
|
annotations</link>. You can apply security to a single bean, using the
|
||||||
<literal>intercept-methods</literal> element to decorate the bean declaration, or
|
<literal>intercept-methods</literal> element to decorate the bean declaration, or
|
||||||
you can secure multiple beans across the entire service layer using the AspectJ style
|
you can secure multiple beans across the entire service layer using the AspectJ style
|
||||||
|
@ -887,7 +887,7 @@ List<OpenIDAttribute> attributes = token.getAttributes();</programlisting>The
|
||||||
<para> The default strategy is to use an <classname>AffirmativeBased</classname>
|
<para> The default strategy is to use an <classname>AffirmativeBased</classname>
|
||||||
<interfacename>AccessDecisionManager</interfacename> with a
|
<interfacename>AccessDecisionManager</interfacename> with a
|
||||||
<classname>RoleVoter</classname> and an <classname>AuthenticatedVoter</classname>.
|
<classname>RoleVoter</classname> and an <classname>AuthenticatedVoter</classname>.
|
||||||
You can find out more about these in the chapter on <link xlink:href="authorization"
|
You can find out more about these in the chapter on <link xlink:href="#authz-arch"
|
||||||
>authorization</link>.</para>
|
>authorization</link>.</para>
|
||||||
<section xml:id="ns-custom-access-mgr">
|
<section xml:id="ns-custom-access-mgr">
|
||||||
<title>Customizing the AccessDecisionManager</title>
|
<title>Customizing the AccessDecisionManager</title>
|
||||||
|
|
|
@ -178,7 +178,7 @@ class="org.springframework.security.web.authentication.preauth.PreAuthenticatedA
|
||||||
(hence the user of the <literal>custom-filter</literal>,
|
(hence the user of the <literal>custom-filter</literal>,
|
||||||
<literal>authentication-manager</literal> and
|
<literal>authentication-manager</literal> and
|
||||||
<literal>custom-authentication-provider</literal> elements (you can read more
|
<literal>custom-authentication-provider</literal> elements (you can read more
|
||||||
about them in the <link xlink:href="ns-config">namespace chapter</link>). You
|
about them in the <link xlink:href="#ns-config">namespace chapter</link>). You
|
||||||
would leave these out of a traditional bean configuration. It's also assumed
|
would leave these out of a traditional bean configuration. It's also assumed
|
||||||
that you have added a <interfacename>UserDetailsService</interfacename> (called
|
that you have added a <interfacename>UserDetailsService</interfacename> (called
|
||||||
<quote>userDetailsService</quote>) to your configuration to load the user's
|
<quote>userDetailsService</quote>) to your configuration to load the user's
|
||||||
|
|
|
@ -17,7 +17,7 @@
|
||||||
<para> The tutorial sample is a nice basic example to get you started. It uses simple
|
<para> The tutorial sample is a nice basic example to get you started. It uses simple
|
||||||
namespace configuration throughout. The compiled application is included in the
|
namespace configuration throughout. The compiled application is included in the
|
||||||
distribution zip file, ready to be deployed into your web container
|
distribution zip file, ready to be deployed into your web container
|
||||||
(<filename>spring-security-samples-tutorial-3.0.x.war</filename>). The <link
|
(<filename>spring-security-samples-tutorial-3.1.x.war</filename>). The <link
|
||||||
xlink:href="#ns-form-and-basic">form-based</link> authentication mechanism is used in
|
xlink:href="#ns-form-and-basic">form-based</link> authentication mechanism is used in
|
||||||
combination with the commonly-used <link xlink:href="#remember-me">remember-me</link>
|
combination with the commonly-used <link xlink:href="#remember-me">remember-me</link>
|
||||||
authentication provider to automatically remember the login using cookies.</para>
|
authentication provider to automatically remember the login using cookies.</para>
|
||||||
|
@ -123,7 +123,7 @@ Success! Your web filters appear to be properly configured!
|
||||||
<title>CAS Sample</title>
|
<title>CAS Sample</title>
|
||||||
<para> The CAS sample requires that you run both a CAS server and CAS client. It isn't
|
<para> The CAS sample requires that you run both a CAS server and CAS client. It isn't
|
||||||
included in the distribution so you should check out the project code as described in
|
included in the distribution so you should check out the project code as described in
|
||||||
<link xlink:href="get-source">the introduction</link>. You'll find the relevant files
|
<link xlink:href="#get-source">the introduction</link>. You'll find the relevant files
|
||||||
under the <filename>sample/cas</filename> directory. There's also a
|
under the <filename>sample/cas</filename> directory. There's also a
|
||||||
<filename>Readme.txt</filename> file in there which explains how to run both the server
|
<filename>Readme.txt</filename> file in there which explains how to run both the server
|
||||||
and the client directly from the source tree, complete with SSL support. You have to
|
and the client directly from the source tree, complete with SSL support. You have to
|
||||||
|
|
|
@ -16,7 +16,7 @@
|
||||||
Spring Security 3.0, it can be used in two ways <footnote>
|
Spring Security 3.0, it can be used in two ways <footnote>
|
||||||
<para>The legacy options from Spring Security 2.0 are also supported, but
|
<para>The legacy options from Spring Security 2.0 are also supported, but
|
||||||
discouraged.</para>
|
discouraged.</para>
|
||||||
</footnote>. The first approach uses a <link xlink:href="el-access-we">web-security
|
</footnote>. The first approach uses a <link xlink:href="#el-access-web">web-security
|
||||||
expression</link>, specified in the <literal>access</literal> attribute of the tag. The
|
expression</link>, specified in the <literal>access</literal> attribute of the tag. The
|
||||||
expression evaluation will be delegated to the
|
expression evaluation will be delegated to the
|
||||||
<interfacename>WebSecurityExpressionHandler</interfacename> defined in the application
|
<interfacename>WebSecurityExpressionHandler</interfacename> defined in the application
|
||||||
|
|
|
@ -582,7 +582,7 @@ Successfully authenticated. Security context contains: \
|
||||||
<classname>RoleVoter</classname>. This is only relevant when a voter-based
|
<classname>RoleVoter</classname>. This is only relevant when a voter-based
|
||||||
<interfacename>AccessDecisionManager</interfacename> is in use. We'll see how
|
<interfacename>AccessDecisionManager</interfacename> is in use. We'll see how
|
||||||
the <interfacename>AccessDecisionManager</interfacename> is implemented in the
|
the <interfacename>AccessDecisionManager</interfacename> is implemented in the
|
||||||
<link xlink:href="authz-arch">authorization chapter</link>.</para>
|
<link xlink:href="#authz-arch">authorization chapter</link>.</para>
|
||||||
</section>
|
</section>
|
||||||
<section>
|
<section>
|
||||||
<title>RunAsManager</title>
|
<title>RunAsManager</title>
|
||||||
|
|
Loading…
Reference in New Issue