https « Security « Spring Q&A





1. Spring security- switching between HTTPS and HTTP    stackoverflow.com

I am working on a spring based application which will be delivered to several clients. I would like to find a way to override the securiy settings defined in web.xml ...

2. Integration testing with Spring RestTemplate, Maven and HTTPS -- Client connection?    stackoverflow.com

I saw this post from Matt Riable which shows how to set up Integration Testing with HTTP, HTTPS and Maven. I found it very interesting. I have got my ...

3. How to return http status 403 on http connection, not on https using Spring    stackoverflow.com

I am using spring mvc and spring security to lock down a webservice. I have restricted all connections to use https using this ...

<http auto-config='true'>
    <intercept-url pattern="/**" access="ROLE_USER" ...

4. Add http or https based on certain condition    stackoverflow.com

I'm working on web application that is built on Spring Framework and also uses spring security. I want users of the application to opt whether they want to use the application in ...

5. Spring MVC Redirect to HTTPs site after successful post form    stackoverflow.com

We would like to redirect user after a successful post to secure pages.

@RequestMapping(value="/myapp", method=POST) 
public String processForm(Formbean formbean){
   // redirect to https ?????? 
   return "redirect:/secure"; 
}
Is ...

6. Spring security: forcing https using annotations?    stackoverflow.com

The spring security docs state (2.3.2):

If your application supports both HTTP and HTTPS, and you require that particular URLs can only be accessed over HTTPS, then ...

7. Is there any way to force https for some pages in spring-security?    stackoverflow.com

currently I'm using tomcat 6 and spring-security 3.0.3.RELEASE without apache. I can force https for login page and it works just fine. Next configuration is used to prevent accessing to some pages ...

8. Spring Security remember-me authentication from https to http cookie writing failure    stackoverflow.com

I'm using Spring Security 3.0.5 for authentication and I'm using remember-me as well. Currently, the login page is a https page and the page that I redirect to afte successfully ...

9. Spring mvc 3 - HTTPS access    stackoverflow.com

How can I force a page to be accessed via HTTPS only. Need to do this via Spring MVC 3 configuration file.





10. Spring https is switching to http. I want to use either https or http for the site depending on the user    stackoverflow.com

I am using Srping 3, Java and Tomcat. We are using a load balancer that allows for https or http requests. The problem is that the https requests are being converted ...

11. Spring Security: transfering passwords    stackoverflow.com

Im developing a web application with java and Spring Security 3.0.5 and I am pretty new to it. I have a community where users can register and log in. Now I ...

12. Spring security https problem    stackoverflow.com

When I use my https login page the spring security forward is using the wrong port: https://www.mywebsite.com:80/j_spring_security_check?j_username=test&j_password=test&_spring_security_remember_me=false My login bean does the following:

    ExternalContext ec = context.getExternalContext();


  ...

13. Spring Security: How to force https with flag?    stackoverflow.com

With Spring security I configure the parts of my web app that need to be secured by https with security:intercept tag. For example:

<security:intercept-url pattern="/**/*secure*" requires-channel="https"/>
<security:intercept-url pattern="/**" requires-channel="http" />    
This ...

14. Spring Security: requires-channel="https" behind SSL accelerator    stackoverflow.com

We're using an F5 BIG-IP device to terminate SSL connections and connecting by plain HTTP to the application server with an spring enabled application. Also we configured F5 to send an ...

15. Spring security switching to http after login. How can I keep https?    stackoverflow.com

I am using Spring MVC and Spring Security. My redirects were switching https to http until I found this post. Spring MVC "redirect:" prefix always redirects to http -- how ...

16. Spring remoting using Https and tomcat    stackoverflow.com

My application is a swing based client communicating to tomcat using spring remoting Http invoker, I want to convert to https.

org.springframework.remoting.RemoteAccessException: Could not access HTTP invoker remote service at [https://localhost:8443/aten_server/metadataservice/MetaDataService-httpinvoker]; nested ...





17. SSL only during login with spring security    stackoverflow.com

I'm trying to use https only during login. The problem is that when the application tries to switch from https to http I end up being redirected to the login form (as ...

18. How do I get Spring to use https?    stackoverflow.com

in the most basic sense, what library's, xml entries, tags do I need to setup a secure http page (Using Spring)?

19. how to force https    stackoverflow.com

I have a grails project. Right now, the user can access it either with HTTP or HTTPS. I would like to require that they can only access it through ...

20. redirect http to https in grails    stackoverflow.com

I have a follow up question about redirecting grails apps from http to https. another user showed me that, the config file, i can do something like this:

   ...

21. How to develop https site with Spring 3.x?    stackoverflow.com

I am a newbie in Spring based web development. Our site is Spring based and is currently http based (so quite insecure). Since, the site is not live yet, we are sending login/password ...

22. Offloading https to load balancers with Spring Security    stackoverflow.com

Right now, the load balancers handle https and then pass along that https to my web servers. So dealing with https double for each request. What I want to do is ...

23. Spring RESTTemplate with HTTPS Authentication    stackoverflow.com

Possible Duplicate:
Spring Security Authentication using RestTemplate
I can use Spring RESTTemplate to get data from a URL. However I want to reach an https URL ...

24. How to implement HTTPS for desired pages in application?    stackoverflow.com

We are trying to implement HTTPS for some pages in our application.So,we changed tomcat server.xml to make HTTPS calls as follows:

<Connector
           ...

25. Spring security's HTTPS issue with load balance    forum.springsource.org

Hi there, I have one load balance + 2 web servers(appche)+2 app servers(tomcat) and install SSL cert on the load balance. using spring security version 2.0.4. http access is working fine. ...

26. Spring Security with OpenAM over https problems    forum.springsource.org

Spring Security with OpenAM over https problems Hi all, We are currently have a Spring MVC 2.5 app running with Spring Security 2.0.4 and OpenAM 9.5.2 installed. The two works nicely ...

27. Only j_spring_security_check in https    forum.springsource.org

Hi, I would like to show login page in http and then post j_password and j_username fields in https to j_spring_security_check action. I would like this scenario just to avoid j_password ...

28. Spring Security and Tomcat - SSL/HTTPs doesn't work.    forum.springsource.org

Spring Security and Tomcat - SSL/HTTPs doesn't work. I have Tomcat 7 integrated into Eclipse to build my web app. When I enable security in Tomcat and compile, I get the ...

29. Call WebService using Basic Authentication and HTTPS    forum.springsource.org

Call WebService using Basic Authentication and HTTPS Hello everybody, i am pretty new to spring and just read through the docs and couldn't find any answer to my question, so i ...

30. Forcing https with direct login form access    forum.springsource.org

Hi, it is possible to force https when user types login form URL's in the browser address field ? I other words, I want for my login form to be ALWAYS ...

31. Secure login (HTTPS) - login successful on second attempt only    forum.springsource.org

Hello friends, I have Acegi configuration that requires the user to login via SSL All is well - the user is redirected to HTTPS if he tries to access login via ...

32. Acegi SpringMVC https channel security    forum.springsource.org

Acegi SpringMVC https channel security After looking at the Acegi documentation and acegi-security-samples. I wanted to try my hand at using acegi with springMVC and https. I got the acegi login ...

33. Doesn't work with https connection -> Channel Security    forum.springsource.org

Doesn't work with https connection -> Channel Security Hi All, It's OK to user LDAP acegi security on test server with http connection. But when the project is delivered to the ...

34. http, https Role management    forum.springsource.org

http, https Role management We need to implement the following features in our application: - RememberMe service for http pages w/o critical information - Login only via https (to http and ...

35. Authentication not working with HTTPS    forum.springsource.org

Authentication not working with HTTPS Hi, I have strange problem. In my application i want that "log in" page should be on https and other pages should be on http. I ...

36. Problem with Acegi and HTTPS    forum.springsource.org

Problem with Acegi and HTTPS I use spring framework acegi-security-0.9.0 vesrion and tomcat 5.5. I want use HTTPS for login page. my acegi configuration file contains following code :

37. Https/ssl    forum.springsource.org

Https/ssl Hi, i'm created a certificate (unsafe one, keytool only, no CA) and added a SSL connector to my Tomcat6 installation. The HTTPS access is working fine in general. Now i ...

38. Acegi-login redirects to http and not https?    forum.springsource.org

Acegi-login redirects to http and not https? I am using Acegi in a webapplication (with Tomcat), but I have a small problem in the production environment with https. 1) The login-page ...

39. Channel Security or https for only few endpoints    forum.springsource.org

Channel Security or https for only few endpoints Hi I am implementing webservices and would like to enforce https on some of the endpoints (but for not all endpoints). For example ...

40. Can any one help me to Configure Acegi and Tomcat to listen to https port ?    forum.springsource.org

Can any one help me to Configure Acegi and Tomcat to listen to https port ? The following steps I followed in my acegi-security.xml,

41. HTTPS/SSL version of SimpleHttpServerFactoryBean?    forum.springsource.org

HTTPS/SSL version of SimpleHttpServerFactoryBean? Kudos to the team for an excellent job on Spring-WS! It works well and has saved me a lot of time and, as usual, is well-documented and ...

42. Can UrlResource access HTTPS target?    forum.springsource.org

There is no principal difference between programming access by http and https. Code: public static void main(String[] args) throws Exception { HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() { public boolean verify(String s, SSLSession sslSession) { ...

43. Bug in Spring Security requires-channel="https" mechanism?    forum.springsource.org

Bug in Spring Security requires-channel="https" mechanism? I've been very frustrated trying to implement the most basic common web security mechanism in Spring Security and trying to workaround all the little flaws ...

44. Empty password when using https to login    forum.springsource.org

Empty password when using https to login Hi, I can login to my application using http. No issues on that. But when i use https to login it throws a BadCredential ...

45. https to http in spring security    forum.springsource.org

https to http in spring security hello, I would like someone to help to integrate a login page that have to be access by https and then switch to http to ...

46. Json + mvc + https (ssl)    forum.springsource.org

Json + mvc + https (ssl) Hi guys. I'm starting to make a little research about integrating HTTPS (SSL) into my JSON-MVC web services. Since I couldn't find any appropriate info ...

47. Converting http to https using Spring Security    forum.springsource.org

Converting http to https using Spring Security Hi, Can someone help me please by telling what all i need to configure in my application, so that my application switches to https, ...

48. SS form authentication switching btw http & https    forum.springsource.org

SS form authentication switching btw http & https Hello, SS gurus, here is the question that is giving me a big headache: we have a front server that converts the external ...

49. Spring security- Switch between HTTP and HTTPS    forum.springsource.org

Hello, I am working on a spring based application which will be delivered to several clients. I would like to find a way to override the security settings defined in web.xml ...

50. Spring Security Apache front - Tomcat - https connection lost    forum.springsource.org

Hi! When using apache (handling SSL/HTTPS) with mod_proxy as a front to tomcat, I loose the https connection (not session though) after logging in! Wtf. Drives me crazy. Works fine locally ...