i using spring security 3.1.1 , mybatis 3 ,session data lost before session time out if application goes in ideal state , user behaves anonymous user after
please in advance
*spring security file reference*
<beans:beans xmlns="http://www.springframework.org/schema/security" xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/xmlschema-instance" xsi:schemalocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd"> <http auto-config="false" use-expressions="true" > <intercept-url pattern="/jsp/home*" access="hasanyrole('role_guest','role_admin','role_support')" /> <intercept-url pattern="/jsp/search*" access="hasanyrole('role_guest','role_admin','role_support')" /> <intercept-url pattern="/jsp/errorsearch*" access="hasanyrole('role_guest','role_admin','role_support')"/> <form-login login-page="/jsp/login.htm" default-target-url="/jsp/home.htm" login-processing-url="/jsp/j_spring_security_check" authentication-failure-url="/jsp/login.htm?error=true"/> <logout logout-url="/jsp/j_spring_security_logout" logout-success-url="/jsp/login.htm" delete-cookies="jsessionid"/> <access-denied-handler error-page="/jsp/accessdenied.htm"/> <session-management session-authentication-error-url="/loginfailed" session-fixation-protection="migratesession"> <concurrency-control expired-url="/loginfailed" error-if-maximum-exceeded="true" max-sessions="1"/> </session-management> </http> <beans:bean id="ldapactivedirectoryauthprovider" class="org.springframework.security.ldap.authentication.ad.activedirectoryldapauthenticationprovider"> <beans:constructor-arg value="homeoffice.test.com" /> <beans:constructor-arg value="ldap://honts0102.homeoffice.test.com:1568" /> <beans:property name="useauthenticationrequestcredentials" value="true" /> <beans:property name="convertsuberrorcodestoexceptions" value="true" /> <beans:property name="userdetailscontextmapper" ref="dashboarduserdetailscontextmapper"/> </beans:bean> <beans:bean id="dashboarduserdetailscontextmapper" class="com.test.dashboard.security.userdetailscontextmapperimpl"/> <authentication-manager> <authentication-provider ref="ldapactivedirectoryauthprovider" /> </authentication-manager> </beans:beans>
Comments
Post a Comment