If you just don't use rememberme, authentication willb e tied to your JSESSIONID, which is already stored in a transient cookie. It will be forgotten if you close the browser, or you can explicitly...
Type: Posts; User: omg!ponies; Keyword(s):
If you just don't use rememberme, authentication willb e tied to your JSESSIONID, which is already stored in a transient cookie. It will be forgotten if you close the browser, or you can explicitly...
There is an exploitable XSS in both acegi-security-sample-tutorial and acegi-security-sample-contacts-filter.
I assume that a lot of people are using the login page provided as is, just reskinning...
OK, I got this working. I was a little confused about how to access beans declared in my securityContext.xml, but I found out and here goes:
SecurityContext context =...
For those of you interested in finding out if a user is logged in, one way is to check to see if the user's GrantedAuthorities includes a specific role, other than ROLE_ANONYMOUS. I did this in a...
Hi, I have an existing struts action that sticks a row in my users table and then does a redirect (yikes, passwords on a GET = bad) to j_security_check. That seemed at the time the only way to have...
Thanks, I found this to work:
1) Place a properties file www.properties in WEB-INF/classes
2) In your applicationContext.xml put:
<bean id="www.properties"...
I want to be able to do something like this:
Properties propers = (Properties)WebApplicationContextUtils.getWebApplicationContext(pageContext.getServletContext()).getBean("myPropers");
What I...