spring security 3 filter not intercepting

Ranch Hand

Posts: 123

posted 11 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

hello

we are moving our application from spring 2.x to spring security 3

When i try to login looks like spring security is not intercepting my request, its trying to find an action class which makes me realize somehow the spring security filter chain is not being invoked and the request is trying to find an action instance.
Below is my applicationContextSecurity.xml file may i know what am i doing wrong

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:beans="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
                        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd">
                        
    <http auto-config="false" entry-point-ref="authenticationProcessingFilterEntryPoint">    
        <intercept-url pattern="/admin/**" access="ROLE_Superuser" />
		<remember-me user-service-ref="userService" key="changeThis"/>		
    </http>

<authentication-manager alias='authenticationManagerAlias'>
        <authentication-provider user-service-ref="userService">

<password-encoder ref="passwordEncoder"/>
        </authentication-provider>
    </authentication-manager>

<beans:bean id="passwordEncoder" class="com.xxx.identity.util.PasswordAuthenticationService"/>
	
	<beans:bean id="authenticationProcessingFilterEntryPoint" class="org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint">
     	<beans:property  name="loginFormUrl" value="/secure/nlb/login.jsp"/>
     	<beans:property name="forceHttps"  value="false" />
	</beans:bean>

<beans:bean id="customAuthenticationProcessingFilter" class="org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter">
		
		<beans:property name="authenticationManager" ref="authenticationManagerAlias"/>
		<beans:property name="rememberMeServices" ref="rememberMeServices"/>
               <beans:property name="filterProcessesUrl" value="/j_spring_security_check"/>
	</beans:bean>

<beans:bean id="rememberMeServices" class="org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices">
		<beans:property name="userDetailsService" ref="userService"/>
		<beans:property name="key" value="changeThis"/>
		<beans:property name="tokenValiditySeconds" value="0"/>
	</beans:bean>
	
	
	<beans:bean id="logoutFilter" class="com.xxx.xxx.filter.CustomLogoutFilter">
		<beans:constructor-arg value=""/>
		<beans:constructor-arg>
			<beans:list>
				<beans:ref bean="rememberMeServices"/>
				<beans:bean class="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler"/>
			</beans:list>
		</beans:constructor-arg>	
	</beans:bean>

<beans:bean id="successHandler" class="org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler" >
        <beans:property name="defaultTargetUrl" value="/index.jsp" /> 
    </beans:bean>
    <beans:bean id="failureHandler" class="org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler" >
        <beans:property name="defaultFailureUrl" value="/secure/nlb/login.jsp?login_error=1" />
    </beans:bean>
    <beans:bean id="sas" class="org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy">
        <beans:property name="migrateSessionAttributes" value="true" />
    </beans:bean>

</beans:beans>