I am able to integrate with following code changes. Thanks for the responses.
Code:
<global-method-security secured-annotations="enabled">
</global-method-security>
<http auto-config="false">
<intercept-url pattern="/login.do*" access="IS_AUTHENTICATED_ANONYMOUSLY" />
<intercept-url pattern="/**" access="ROLE_USER" />
<form-login login-page='/login.do' default-target-url='/account/search.do' />
<custom-filter ref="autoLoginFilter" position="PRE_AUTH_FILTER" />
<logout logout-url="/logout.do" logout-success-url="/login.do"/>
</http>
<beans:bean id="autoLoginFilter" class="com.pg.backoffice.reports.auth.AutoLoginFilter">
<beans:property name="authenticationManager" ref="authenticationManager" />
</beans:bean>
<beans:bean id="preauthAuthProvider"
class="org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider">
<beans:property name="preAuthenticatedUserDetailsService">
<beans:bean class="com.pg.backoffice.reports.auth.RsaAuthenticationUserDetailsService"></beans:bean>
</beans:property>
<beans:property name="order" value="1"/>
</beans:bean>
<authentication-manager alias="authenticationManager" >
<authentication-provider ref="preauthAuthProvider" ></authentication-provider>
<authentication-provider >
<user-service id="rsaUser">
<user name="admin" password="admin" authorities="ROLE_SUPERVISOR,ROLE_USER, ROLE_TELLER" />
<user name="root" password="root" authorities="ROLE_USER,ROLE_TELLER" />
</user-service>
</authentication-provider>
</authentication-manager>
Code:
public class AutoLoginFilter extends AbstractPreAuthenticatedProcessingFilter {
@Override
protected Object getPreAuthenticatedCredentials(HttpServletRequest request) {
String user = request.getParameter("user");
if (StringUtils.hasLength(user)) {
return "ROLE_SUPERVISOR";
} else
return null;
}
@Override
protected Object getPreAuthenticatedPrincipal(HttpServletRequest request) {
System.out.println("getPreAuthenticatedCredentials: " + request.getRequestURI());
String user = request.getParameter("user");
if (StringUtils.hasLength(user)) {
return user;
} else
return null;
}
}
Code:
public class RsaAuthenticationUserDetailsService implements AuthenticationUserDetailsService{
public UserDetails loadUserDetails(Authentication user) throws UsernameNotFoundException {
if (user.getPrincipal() != null) {
Collection<GrantedAuthority> authorities = new ArrayList<GrantedAuthority>();
authorities.add(new GrantedAuthorityImpl("ROLE_USER"));
return new User((String) user.getPrincipal(), "none", true, true, true, true, authorities);
}
return null;
}
}
Configuring custom PreAuthenticatedAuthenticationProvider
