Sure, I have this
o/w spring wouldn't have worked at all.
about the debug - well, I guess I do something wrong... I've added this to my log4j.properties:
but when I run the rsc-server alone (without the client WAR and the authentication WAR) I do not see any debug logs. when I run other components (client and auth-provider), I get tons of debug logs but they are irrelevant and I don't see there the FilterChain prints
log4j.logger.org.springframework.security=DEBUG, INFO, CONSOLE, LOGFILE