Spring Security - Apply pattern to custom http filter?

Question

I use Spring Security 3.0 and I would like to define a Basic Authentication filter only on a specific subset of URLs in my application.

Is it possible to add a pattern to custom-filters ?

I would like to add a pattern attribute like this :

<security:custom-filter ref="basicAuthenticationFilter" position="BASIC_AUTH_FILTER" pattern="/services/**"/>

I saw it is possible to use filters attribute on intercept-url but I would not have to list them all.

Olivier.Roger · Accepted Answer · 2012-06-04 09:03:21Z

1

I used a filer-chain-map to solve this issue.

    <security:filter-chain-map path-type="ant">
        <security:filter-chain pattern="/ws/**" filters="basicAuthenticationFilter"/>
    </security:filter-chain-map>

There might be a better solution though.

answered Jun 4, 2012 at 9:03

Olivier.Roger

4,2297 gold badges44 silver badges70 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Olivier.Roger Over a year ago

It works as expected but doing this seems to create a valid session that can be used for non-matching URL afterwards. This is a logical behavior but I would like that session to be valid only for the pattern-matching URLs. Should I inspect and invalidate the session ? based on what ?

Collectives™ on Stack Overflow

Spring Security - Apply pattern to custom http filter?

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related