Thanks! Not sure why I didn't think of looking in the Parser :)
Type: Posts; User: Ale; Keyword(s):
Thanks! Not sure why I didn't think of looking in the Parser :)
Hi,
I'm using OAuth 1.0 in a 2-legged configuration and I'm trying to customise the error response sent back to the client.
There are a number of possible exceptions that can be raised by...
No ideas? :)
Found out how to fix this issue. I added the following to the web.xml:
<servlet-mapping>
<servlet-name>default</servlet-name>
<url-pattern>/static/*</url-pattern>...
Hi everyone,
I'm having some trouble with the form login and its default target URL behaviour.
Here is the code which doesn't work as expected:
applicationContext-security.xml
Hi Rohan, thanks for the response. Setting filters to none is essentially the same as setting security to none in the <http> tag.
I'd like to maintain the files in jsapp with security.
To...
Hi,
I'm coming across a problem when using Spring Security with JavaScript or CSS files.
I have a project I am building with Maven and have the following structure:
/static
/jsapp...
Hi,
I have two security setups for my web app: one to secure the API using 2-legged OAuth and the other to allow users to log into the admin area.
When users log into the admin area, the API no...
Hi Rob, thanks for taking your time to answer.
I did a few experiments and it works as expected. After re-reading the documentation it made sense :)
Ok, so I've managed to fix the error I was getting above. It was due to some of the OAuth dependencies being placed after the Form Login entry in the applicationContext. I re-ordered the elements and...
However, I'm worried with the create-session set to never. The reason is that there can be users accessing the admin console (which means the session is being used by the application) but I still...
The rest of the log:
DEBUG [org.springframework.security.web.util.AntPathRequestMatcher] Checking match of request : '/'; against '/v1/**'
DEBUG...
Hi Rob,
Thanks for that. I read the documentation and it makes sense to use never as it should check for any existing authorization objects.
However, when I add the "never" I get the following...
Hi,
I have an application which requires two authentication methods: Form Login and 2-Legged OAuth.
The 2-legged OAuth is used to protect a REST API which resides under the path /v1/ and the...
Thanks, that worked!
Hi,
Thanks for sharing the code!
I'm having trouble opening the client code zip file. I keep getting a "not a valid zip" error message.
Any chance you could upload it again? :)
Thanks again