Skip to content

Commit d7ed005

Browse files
committed
SWS-805
1 parent 9572c6b commit d7ed005

File tree

2 files changed

+5
-35
lines changed

2 files changed

+5
-35
lines changed

security/src/main/java/org/springframework/ws/soap/security/wss4j/callback/SpringSecurityPasswordValidationCallbackHandler.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
* password contained in this details object is then compared with the digest in the message.
4343
*
4444
* @author Arjen Poutsma
45-
* @since 1.5.0
45+
* @since 2.1
4646
*/
4747
public class SpringSecurityPasswordValidationCallbackHandler extends AbstractWsPasswordCallbackHandler
4848
implements InitializingBean {

src/docbkx/security.xml

Lines changed: 4 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -1352,43 +1352,13 @@
13521352
</bean>]]></programlisting>
13531353
</section>
13541354
<section>
1355-
<title>SpringPlainTextPasswordValidationCallbackHandler</title>
1356-
<para>
1357-
The <classname>SpringPlainTextPasswordValidationCallbackHandler</classname> requires an Spring
1358-
Security <interfacename>AuthenticationManager</interfacename> to operate. It uses this manager
1359-
to authenticate against a
1360-
<classname>UsernamePasswordAuthenticationToken</classname>
1361-
that it creates. If authentication is successful, the token is stored in the
1362-
<classname>SecurityContextHolder</classname>. You can set the
1363-
authentication manager using the <property>authenticationManager</property>
1364-
property:
1365-
</para>
1366-
<programlisting><![CDATA[<beans>
1367-
<bean id="springSecurityHandler"
1368-
class="org.springframework.ws.soap.security.wss4j.callback.SpringPlainTextPasswordValidationCallbackHandler">
1369-
<property name="authenticationManager" ref="authenticationManager"/>
1370-
</bean>
1371-
1372-
<bean id="authenticationManager" class="org.springframework.security.providers.ProviderManager">
1373-
<property name="providers">
1374-
<bean class="org.springframework.security.providers.dao.DaoAuthenticationProvider">
1375-
<property name="userDetailsService" ref="userDetailsService"/>
1376-
</bean>
1377-
</property>
1378-
</bean>
1379-
1380-
<bean id="userDetailsService" class="com.mycompany.app.dao.UserDetailService" />
1381-
...
1382-
</beans>]]></programlisting>
1383-
</section>
1384-
<section>
1385-
<title>SpringDigestPasswordValidationCallbackHandler</title>
1355+
<title>SpringSecurityPasswordValidationCallbackHandler</title>
13861356
<para>
1387-
The <classname>SpringDigestPasswordValidationCallbackHandler</classname>
1388-
requires an Spring Security
1357+
The <classname>SpringSecurityPasswordValidationCallbackHandler</classname> validates plain text
1358+
and digest passwords using a Spring Security
13891359
<classname>UserDetailService</classname>
13901360
to operate. It uses this service to retrieve the
1391-
password of the user specified in the token. The digest of the password contained in this
1361+
(digest of ) the password of the user specified in the token. The (digest of) the password contained in this
13921362
details object is then compared with the digest in the message. If they are equal, the user has
13931363
successfully authenticated, and a
13941364
<classname>UsernamePasswordAuthenticationToken</classname>

0 commit comments

Comments
 (0)