Request 2 « Security « Spring Q&A

1. How to set SPRING_SECURITY_SAVED_REQUEST_KEY forum.springsource.org

How to set SPRING_SECURITY_SAVED_REQUEST_KEY Hi, I want to redirect user back to the original page after successful login. i read documentation and it says if url exist in SPRING_SECURITY_SAVED_REQUEST_KEY, it will ...

2. Getting Extra Authentication data from request forum.springsource.org

Getting Extra Authentication data from request Hey guys! I have my "login" system working fine with Spring Security 2. Now I have to get an extra information from the user that ...

3. 75 Queries for User/Acl for single page request? forum.springsource.org

Apr 20th, 2009, 06:23 PM #1 Michael.Griffith View Profile View Forum Posts Private Message Junior Member Join Date Dec 2008 Posts 11 75 Queries for User/Acl for single page request? Hello ...

4. Access to the request object for the current thread. forum.springsource.org

Access to the request object for the current thread. I am in the process of converting portlet code from JSF to Spring MVC. We are using Spring 2.5.6. JSF provides a ...

5. Mixing Method-Level Authorization Checks with Web Request Checks forum.springsource.org

Mixing Method-Level Authorization Checks with Web Request Checks I have a web application with a homegrown security framework that I would like to replace with Spring Security. I have gone through ...

6. Get j_username from request forum.springsource.org

I need to find out in my application who was authenticated. I expected the j_username parameter to be in the request after the redirect to my target url. But it is ...

7. new user issue - Filters not running on request forum.springsource.org

Jul 16th, 2009, 12:46 PM #1 d_m View Profile View Forum Posts Private Message Junior Member Join Date Jul 2009 Posts 8 new user issue - Filters not running on request ...

8. Request not forwarded to Resource when using pre authentication forum.springsource.org

Request not forwarded to Resource when using pre authentication I am using Spring-security 2.0.4. In my application authentication is done by siteminder, but in dev i don't have access so created ...

9. Documentation for 'SPRING_SECURITY_SAVED_REQUEST_KEY' forum.springsource.org

A Spring book mentions 'SPRING_SECURITY_SAVED_REQUEST_KEY'. I, however, can't find this term in the 3.0.0 documentation (searching on the pdf version). Does it still exist?

10. load user authoritees on every request forum.springsource.org

load user authoritees on every request Hi , I am using CAS for authentication and spring security for authorization. I want spring security to populate user authorities on every request, as ...

11. URGENT: Authenticate on every request - how do I achieve this? forum.springsource.org

URGENT: Authenticate on every request - how do I achieve this? I have a REST based webservice that uses Basic Authentication that I am trying to secure with Spring Security 2.0.x. ...

12. Question on Request-Header Authentication forum.springsource.org

Hi, I know with Request-Header Authentication I need to pass a attribute in the request header but we have a requirement where i get the JSESSIONID cookie instead of request header. ...

13. ACEGI_SAVED_REQUEST_KEY lost with acegi 1.0.5 forum.springsource.org

Hi All, Here is the usecase where ACEGI_SAVED_REQUEST_KEY is not being saved. 1. User is "remembered" using the remember me cookie. 2. User visits a secure page that requires FULLY_AUTHENTICATED 3. ...

14. Getting info from request.getHeader("user"); forum.springsource.org

The application that I work on has information in the header. This is available in the jsp as follows <% String user=request.getHeader("user"); %> A controller is called to populate all the ...

15. Spring core: Request new password if you forget forum.springsource.org

Hi Everyone, I'm now working on a site and should allow the user to request a new password if he has forgotten his password. How can I do that? Thanks in ...

16. How to use target URL (saved request) redirects with Pre Authentication forum.springsource.org

In spring 2.0.x ... does ExceptionTranslationFilter kick-in and put the SavedRequest on the session when someone is using a Pre Authentication Filter and Provider? I ask because when I try to ...

17. Possible to use request headers to populate username?? forum.springsource.org

Possible to use request headers to populate username?? Hey, I was wondering if it was possible to populate a username by extracting it from the http request headers? I've currently got ...

18. Spring Security and AJAX request forum.springsource.org

Hi, Is there a way to authenticate without having to be redirected to / per default or any other page? I have an page where you connect via a tool tip. ...

19. j_spring_security_check request header forum.springsource.org

Hi, I am new to Spring security. I have a question about the request header that is passed when a user is authenticated using j_spring_security_check. The request header contains the plain ...

20. Security: Preventing tampering of post request calling submit forum.springsource.org

Security: Preventing tampering of post request calling submit Hi, I have been looking at security issues (Spring MVC 2.56 app) around the OWASP TOP 10 web site vulnerabilities. I discovered while ...

21. Request Header Authentication and Spring Web Services forum.springsource.org

I'm using RequestHeaderAuthenticationFilter for a web application. I also have a Spring Web Service for which I want to use the same authentication method (send a username in the http header). ...

22. Spring Security 3.0.0 - request parameters are lost forum.springsource.org

Spring Security 3.0.0 - request parameters are lost I have sollution which was working for 2 years with Spring Security 2.0.5 but after we moved to 3.0.0 I have problems (the ...

23. Using spring:eval to access jsp request or session objects forum.springsource.org

Can you access the jsp's session or request object using the tag. How do you go about doing this. If i defint the tag for , ...

24. Issue while forwarding requests with Spring Security 3.0.4 forum.springsource.org

Issue while forwarding requests with Spring Security 3.0.4 Hello all, I've just uncovered an issue while upgrading from 3.0.3 version. I am not exactly sure if it's a bug or not, ...

25. Custom Authentication provider gets invoked with every browser request forum.springsource.org

Dec 20th, 2010, 12:00 AM #1 sanjeev.verma View Profile View Forum Posts Private Message Junior Member Join Date Dec 2010 Posts 4 Custom Authentication provider gets invoked with every browser request ...